Lead DevOps Engineer

We are looking for a Lead DevOps Engineer to run a one-person DevOps function for a multi-tenant SaaS platform in insurance and financial services. You will support ~18 .NET microservices and an Angular SSR UI on Microsoft Azure across dev/demo/UAT/prod in primary and DR regions while enabling 30+ developers across five teams.

Responsibilities

• Administer Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights, and Log Analytics
• Maintain AKS-hosted self-hosted build agents to keep CI/CD workflows running reliably
• Implement Infrastructure as Code with ARM templates and PowerShell via shared central pipeline templates used across approximately 20 repositories
• Develop and sustain Azure DevOps YAML pipelines, manage GitHub repositories, rulesets, and branch policies as part of the ADO-to-GitHub migration
• Resolve pipeline failures and reduce throttling-related disruptions
• Analyze production incidents using Application Insights, Kusto, and Kudu diagnostics
• Troubleshoot third-party integrations with insurers and banks across DNS, TCP, TLS, HTTP, and authentication layers, including egress and whitelisting requests and vendor escalations
• Coordinate change management through ServiceNow CHG records, implementation plans, and TCS task coordination
• Track VM vulnerability remediation with TCS based on Wiz findings, triage Invicti DAST results, and investigate WAF blocks
• Complete client security questionnaires and manage SailPoint access recertification along with PIM/Entra privileged access
• Drive FinOps efforts including Azure cost allocation per tenant and line of business, capacity sizing for large client onboardings, and infrastructure budget input
• Support developer enablement through access requests, app settings propagation across environments, and configuration drift detection

Requirements

• Proven DevOps experience of 5+ years supporting production SaaS platforms
• Expert-level knowledge of Azure services including App Services, Application Gateway, WAF, and Azure Firewall
• Hands-on proficiency with Azure Key Vault, Blob Storage, Azure DNS, Application Insights, and Log Analytics
• Strong capability in AKS administration and running self-hosted build agents
• Solid background in Infrastructure as Code using ARM templates and PowerShell
• Demonstrated experience with Azure DevOps YAML pipelines and GitHub repository management, rulesets, and branch policies
• Proficiency in incident analysis using Kusto and Kudu diagnostics
• Deep understanding of layered connectivity troubleshooting (DNS, TCP, TLS, HTTP, auth) for third-party integrations
• Working knowledge of ServiceNow change management processes
• Experience with security and compliance tooling such as Wiz, Invicti DAST, and SailPoint
• Ability to handle FinOps activities including cost allocation and capacity sizing
• Comfort using GitHub Copilot CLI agents and applying DevOps automation workflows
• English proficiency at B2+ (Upper-Intermediate) level