Devops Engineer

Dicetek LLC; Abu Dhabi; On-site; AED 180,000 - 240,000; Full time

Job summary

Dicetek LLC is seeking an experienced DevOps/Platform Engineer to own Azure infrastructure, design production IaC with Terraform or Bicep, and maintain multi-namespace AKS with strong security controls. You will build and operate CI/CD pipelines, manage image signing, keys, and disaster recovery for UAE deployments.

Candidates should have 5+ years in the field, 2+ years on Azure, and certifications like AZ-104/AZ-400 or CKA are highly regarded.

Qualifications

• 5+ years DevOps/Platform Engineering experience.
• 2+ years on Azure.
• Terraform or Bicep – production IaC.
• Kubernetes / AKS: namespaces, RBAC, Network Policies, Helm charts, Kustomize.
• Azure DevOps or GitHub Actions – multi-stage pipelines.
• Azure Monitor, Log Analytics, KQL.
• Container ecosystem: Docker, ACR, image signing, admission control.
• Azure networking: VNet, private endpoints, NSGs, ExpressRoute concepts.
• KEDA (Kubernetes Event-Driven Autoscaling) or equivalent autoscaling experience.

Responsibilities

• Own and maintain AWA Azure infrastructure in Terraform/Bicep.
• Design and maintain CI/CD pipelines for all AWA components.
• Manage a 5-namespace AKS cluster with policies and autoscaling.
• Govern container images with Notary v2 signing and ACR controls.
• Manage Key Vault access, endpoints, and certificate rotation.
• Configure monitoring with Azure Monitor and KQL queries.
• Enforce security posture using Defender for Cloud and Gatekeeper.
• Maintain DR procedures and validate RTO/RPO for UAE deployments.

Skills

DevOps / Platform engineering

Azure

Terraform / Bicep

Kubernetes / AKS

Azure DevOps / GitHub Actions

Monitoring with KQL

Container ecosystem

Azure networking

KEDA

Education

Bachelor's degree in Computer Science, Systems Engineering, or equivalent

Azure Administrator Associate (AZ-104) or DevOps Engineer Expert (AZ-400) strongly preferred

Certified Kubernetes Administrator (CKA) advantageous

Tools

Terraform

GitHub Actions

Azure DevOps

Notary v2 (image signing)

Job description

• Infrastructure as code: Own and maintain all AWA Azure infrastructure in Terraform/Bicep: AKS 5-namespace cluster, ADLS Gen2 accounts with WORM policies, Azure AI Foundry APIM configurations, Azure Firewall allowlists, private endpoints, Key Vault, Container Registry, ExpressRoute peering.

• CI/CD pipeline ownership: Design and maintain Azure DevOps pipelines for all AWA components: container image build -> ACR push -> Notary v2 signing -> AKS deployment; Terraform plan -> policy check -> apply; Agent Regression Testing gate on every PR.

• AKS operations: Manage the 5-namespace AKS cluster — namespace isolation, Network Policies, Pod Disruption Budgets, KEDA autoscaling rules based on Kafka consumer lag, OPA Gatekeeper admission policies, Workload Identity bindings for all agent pods.

• Container governance: Manage ACR, enforce Notary v2 image signing, configure vulnerability scanning, maintain the approved-image ConfigMap used by OPA Gatekeeper admission control.

• Secret and certificate management: Own Azure Key Vault configuration — access policies per managed identity, automatic TLS certificate rotation, secret rotation schedules, audit of all secret access events.

• Monitoring and alerting: Configure Azure Monitor alert rules and Log Analytics KQL queries for SLA breach, error rate spike, pod crash loop, token budget breach, and Kafka consumer lag; maintain PagerDuty escalation paths.

• Security posture: Work with the AI Security Engineer to implement Azure Policy assignments, Defender for Cloud recommendations, Firewall rule reviews, and Private Endpoint configurations; maintain the AWA network topology diagram.

• Disaster recovery: Maintain and test DR procedures: failover to UAE South replica for ADLS Gen2, Azure AI Foundry PTU -> PAYG -> DR endpoint routing, Orkes cluster recovery, RTO/RPO validation.

Desired Candidate Profile

• Technical — Essential

  • 5+ years DevOps/Platform Engineering; 2+ years on Azure

  • Terraform or Bicep — production IaC, not just templates

  • Kubernetes / AKS: namespaces, RBAC, Network Policies, Helm charts, Kustomize

  • Azure DevOps or GitHub Actions — multi-stage pipelines, approvals, environments

  • Azure Monitor, Log Analytics, KQL query language

  • Container ecosystem: Docker, ACR, image signing, admission control

  • Azure networking: VNet, private endpoints, NSGs, Azure Firewall, ExpressRoute concepts

  • KEDA (Kubernetes Event-Driven Autoscaling) or equivalent autoscaling experience

• Technical — Advantageous

  • Azure Key Vault, managed identity, Workload Identity for Kubernetes

  • OPA Gatekeeper or Kyverno for Kubernetes policy enforcement

  • Kafka / Azure Event Hubs — consumer group management, lag monitoring

  • ADLS Gen2, WORM immutable storage, lifecycle management policies

  • Azure AI Foundry / APIM — token quotas, rate limiting, backend routing configuration

  • Security tooling: Defender for Cloud, Sentinel, Notary v2

• Qualifications

  • Bachelor's degree in Computer Science, Systems Engineering, or equivalent

  • Azure Administrator Associate (AZ-104) or DevOps Engineer Expert (AZ-400) strongly preferred

  • Certified Kubernetes Administrator (CKA) advantageous

• Skills

  Terraform

  Kubernetes

  Azure DevOps