Azure Devops

Description • Containers & Orchestration: Docker (hardened builds); Kubernetes/AKS (RBAC, HPA/KEDA, PDB); Helm (chart authoring, library charts) • IaC: Terraform (Azure — AKS, PostgreSQL, Service Bus, Key Vault, APIM); Atlantis/Terraform Cloud • CI/CD & GitOps: Jenkins, GitLab CI, GitHub Actions; ArgoCD/Flux; Trivy, Checkov, OWASP dep-check • Cloud: Azure — AKS, Service Bus, Elasticsearch Service, Data Factory/Synapse, Monitor, Log Analytics • Observability: Prometheus + Grafana; OpenTelemetry; ELK/OpenSearch; PagerDuty/Opsgenie • Messaging: Kafka (MSK/Confluent/Event Hubs) — topic mgmt, schema registry, consumer-lag monitoring; RabbitMQ ops • Security: Azure Key Vault / HashiCorp Vault; mTLS; Trivy/Snyk; CIS K8s benchmarks; FCA/PCI-DSS • Scripting: Python, Bash, Groovy for pipelines, runbooks, and automated incident response • Exposure to Jenkins. Key Responsibilities • Own and evolve CI/CD pipelines; implement blue/green, canary, and feature-flag progressive delivery. • Manage AKS clusters: node pool sizing, upgrade, namespace isolation, network policies, cost optimization. • Author and maintain Terraform modules for all Azure infrastructure; enforce IaC review and state lock. • Maintain Helm chart library; govern chart versioning aligned with squad delivery cadence. • Design and operate observability stack: Prometheus scrapers, per-squad Grafana dashboards, distributed tracing. • Manage Kafka clusters and Azure Service Bus queues for invoice event flows. • Drive security automation in pipelines: SAST, container scanning, secrets detection. • Maintain Elasticsearch cluster health; tune ILM policies for 52M+ invoice documents. • Participate in on-call rotation; lead post-incident reviews; maintain platform runbooks. Requirements • 5+ yrs DevOps / Platform Engineering / SRE on high-volume fintech or financial services platform. • Expert Kubernetes (CKA or equivalent) and Helm. • Strong Terraform — multi-module IaC for Azure or AWS. • Production Kafka operations and Elasticsearch cluster management. • CI/CD pipeline design (Jenkins / GitLab CI / GitHub Actions) and GitOps (ArgoCD or Flux). • Python (preferred) for operational automation. • Azure certs (AZ-104, AZ-400, CKA) advantageous; FCA/PCI-DSS cloud security understanding essential. • Good to have: Exposure to GitLabs, GitHub and Github Actions Responsibilities Key Responsibilities • Own and evolve CI/CD pipelines; implement blue/green, canary, and feature-flag progressive delivery. • Manage AKS clusters: node pool sizing, upgrade, namespace isolation, network policies, cost optimization. • Author and maintain Terraform modules for all Azure infrastructure; enforce IaC review and state lock. • Maintain Helm chart library; govern chart versioning aligned with squad delivery cadence. • Design and operate observability stack: Prometheus scrapers, per-squad Grafana dashboards, distributed tracing. • Manage Kafka clusters and Azure Service Bus queues for invoice event flows. • Drive security automation in pipelines: SAST, container scanning, secrets detection. • Maintain Elasticsearch cluster health; tune ILM policies for 52M+ invoice documents. • Participate in on-call rotation; lead post-incident reviews; maintain platform runbooks. Qualifications Requirements • 5+ yrs DevOps / Platform Engineering / SRE on high-volume fintech or financial services platform. • Expert Kubernetes (CKA or equivalent) and Helm. • Strong Terraform — multi-module IaC for Azure or AWS. • Production Kafka operations and Elasticsearch cluster management. • CI/CD pipeline design (Jenkins / GitLab CI / GitHub Actions) and GitOps (ArgoCD or Flux). • Python (preferred) for operational automation. • Azure certs (AZ-104, AZ-400, CKA) advantageous; FCA/PCI-DSS cloud security understanding essential. • Good to have: Exposure to GitLabs, GitHub and Github Actions