Cloud DevOps Engineer

Infinite pl; Abu Dhabi; On-site; AED 360,000 - 540,000; Full time

Job summary

Infinite pl is seeking a Cloud DevOps Engineer to establish a secure Azure foundation, deployment pipelines, and operational mechanics for agentic AI products. The role combines landing-zone engineering with CI/CD, MLOps/LLMOps, IaC, observability, and release automation across sandbox, staging, and production.

Key requirements include hands-on Azure experience, IaC with Bicep/Terraform, and experience with Azure DevOps or GitHub Actions, AKS/Container Apps, Key Vault, and OpenTelemetry.

Qualifications

• Hands-on Azure cloud engineering experience, including landing zones, Cloud Adoption Framework, subscriptions, RBAC, networking, Private Link, Azure Policy, and Defender for Cloud.
• Strong infrastructure-as-code experience with Bicep and/or Terraform, with disciplined source control and environment management practices.
• Experience with Azure DevOps and/or GitHub Actions, CI/CD pipeline design, deployment automation, release management, and rollback planning.
• Experience with containers, ACR, AKS and/or Container Apps, Key Vault, secrets management, workload identity, and secure deployment patterns.
• Good understanding of MLOps/LLMOps or agent-ops concepts, including artifact/version registries, deployment gates, eval-in-pipeline patterns, and model/prompt versioning.
• Ability to work in regulated or security-conscious environments where residency, auditability, cost control, and operational reliability matter.
• Strong troubleshooting mindset across infrastructure, networking, identity, pipelines, and application runtime layers.

Responsibilities

• Design, build, and operate Azure landing zones for experimentation and production-grade workloads.
• Implement hub-spoke networking, Private Link, firewall, NSGs, Defender for Cloud, Azure Policy, and cost governance.
• Create self-service sandbox templates with auto-expiry, policy controls, cost visibility, and graduation paths.
• Build CI/CD pipelines for applications, agents, infrastructure-as-code, and deployment environments.
• Implement environment promotion with gate hooks, approvals, rollback, and artifact versioning.
• Manage container build and registry workflows, ACR, AKS/Container Apps, and Key Vault integration.
• Set up observability with OpenTelemetry into Azure Monitor / Log Analytics and dashboards.
• Partner with governance, platform, and engineering teams to enforce controls without slowing experimentation.

Skills

Azure cloud engineering

CI/CD design

Infrastructure-as-code

Security & governance

Regulated environments

Troubleshooting

Tools

Terraform

Bicep

Entra

OpenTelemetry

ACR

AKS

Container Apps

Key Vault

GitHub Actions

Azure DevOps

Private Link

Azure Policy

Defender for Cloud

Job description

ABOUT INFINITE PL

Infinite pl is a digital‑led tech firm driven to become a digital logistics pioneer by harnessing the power of people, data, and platforms. We orchestrate and build innovative platforms that tackle complex problems within logistics and adjacent sectors, enriching the experiences of governments, businesses, and residents through cutting‑edge digital solutions.

ROLE SUMMARY

We are looking for a Cloud DevOps Engineer to build the secure Azure foundation, deployment pipelines, environments, and operational mechanics that allow agentic AI products to ship safely and repeatedly. This role blends cloud landing‑zone engineering with CI/CD, MLOps/LLMOps, infrastructure‑as‑code, observability, and release automation across sandbox, staging, and production environments.

KEY RESPONSIBILITIES

• Design, build, and operate Azure landing zones for Fast Track experimentation and Production‑grade workloads, including management groups, subscriptions, policy, RBAC, networking, and security guardrails.
• Implement hub‑spoke networking, Private Link, firewall, NSGs, Defender for Cloud, Azure Policy, and cost governance aligned to sovereign and regulated cloud requirements.
• Create self‑service sandbox templates with auto‑expiry, policy controls, cost visibility, and clear graduation paths into staging and production.
• Build CI/CD pipelines for applications, agents, infrastructure‑as‑code, and deployment environments using Azure DevOps or GitHub Actions.
• Implement environment promotion from sandbox to staging to production with gate hooks, approvals, rollback, agent/model versioning, and auditability.
• Manage container build and registry workflows, ACR, AKS and/or Azure Container Apps, secrets integration with Key Vault, and secure supply‑chain practices.
• Set up observability and telemetry plumbing, including OpenTelemetry into Azure Monitor / Log Analytics, release/rollback automation, and operational dashboards.
• Partner with governance, platform, and engineering teams to enforce controls mechanically without slowing down safe experimentation.

KEY REQUIREMENTS

• Hands‑on Azure cloud engineering experience, including landing zones, Cloud Adoption Framework, subscriptions, RBAC, networking, Private Link, Azure Policy, and Defender for Cloud.
• Strong infrastructure‑as‑code experience with Bicep and/or Terraform, with disciplined source control and environment management practices.
• Experience with Azure DevOps and/or GitHub Actions, CI/CD pipeline design, deployment automation, release management, and rollback planning.
• Experience with containers, ACR, AKS and/or Container Apps, Key Vault, secrets management, workload identity, and secure deployment patterns.
• Good understanding of MLOps/LLMOps or agent‑ops concepts, including artifact/version registries, deployment gates, eval‑in‑pipeline patterns, and model/prompt versioning.
• Ability to work in regulated or security‑conscious environments where residency, auditability, cost control, and operational reliability matter.
• Strong troubleshooting mindset across infrastructure, networking, identity, pipelines, and application runtime layers.

PREFERRED QUALIFICATIONS

• Experience with sovereign or government cloud environments, including UAE‑based Azure regions and Core42/G42 constructs where applicable.
• Policy‑as‑code exposure, GitOps practices, MLflow, Azure ML, Azure AI Foundry registry, or comparable registry tooling.
• Experience supporting AI, agentic systems, or data‑intensive workloads in production.
• Familiarity with SRE practices, SLOs, incident management, DR/BCP, run‑cost optimisation, and security‑by‑design operations.
• Arabic language capability or experience supporting public‑sector technology programs in the region.

TECH STACK / TOOLS

Azure UAE North/Central - Core42/G42 - Bicep - Terraform - Entra - Azure Policy - Private Link - Defender - Azure DevOps - GitHub Actions - ACR - AKS - Container Apps - Key Vault - OpenTelemetry

FIRST 90 DAYS SUCCESS

• Production landing zone and Fast Track sandbox template are live with residency, security, and cost guardrails enforced.
• CI/CD pipelines are green for core app, agent, and infrastructure deployments.
• Promotion and rollback paths are demonstrated with versioned, auditable artefacts across environments.

This role is not.

An app or agent builder. This role provides the secure ground, automation, and release mechanics that app and AI engineers build on.