DevOps Engineers (AIOps) - API and Kubernetes Dicetek LLC Dicetek LLC On-site Fast Track available

HireHouse; Abu Dhabi; On-site; AED 260,000 - 420,000; Full time

Job summary

HireHouse in Abu Dhabi seeks a seasoned Azure Infrastructure/DevOps engineer to own and maintain AWA Azure infrastructure in Terraform/Bicep, AKS, ADLS Gen2 with WORM, Key Vault, ExpressRoute, private endpoints and governance across CI/CD pipelines, security, and disaster recovery.

You will design and maintain Azure DevOps pipelines for all components, enforce image signing, security controls, monitor with Azure Monitor and KQL, manage DR testing to UAE South, and coordinate with security to

Responsibilities

• Own and maintain AWA Azure infrastructure in Terraform/Bicep: AKS 5-namespace cluster, ADLS Gen2 with WORM policies, Key Vault, Container Registry, ExpressRoute peering.
• Design and maintain Azure DevOps pipelines for all components: container image build, ACR push, Notary v2 signing, AKS deployment; Terraform plan, policy check, apply; PR gating.
• Manage 5-namespace AKS cluster: namespace isolation, Network Policies, Pod Disruption Budgets, KEDA autoscaling, OPA Gatekeeper policies, Workload Identity bindings.
• Manage ACR, enforce Notary v2 signing, configure vulnerability scanning, maintain approved-image ConfigMap used by OPA Gatekeeper.
• Own Azure Key Vault configuration—access policies per managed identity, TLS secret rotation, audit of secret access events.
• Configure Azure Monitor alert rules and Log Analytics queries for SLA breach, error spikes, pod crashes, token budget breach, and Kafka lag; maintain PagerDuty escalation.
• Collaborate on Azure Policy assignments, Defender for Cloud recommendations, firewall reviews, Private Endpoint configurations; maintain AWA network topology.
• Maintain and test DR procedures: failover to UAE South replica for ADLS Gen2, DR endpoints, RTO/RPO validation.

Job description

• Infrastructure as code: Own and maintain all AWA Azure infrastructure in Terraform/Bicep: AKS 5-namespace cluster, ADLS Gen2 accounts with WORM policies, Azure AI Foundry APIM configurations, Azure Firewall allowlists, private endpoints, Key Vault, Container Registry, ExpressRoute peering.
• CI/CD pipeline ownership: Design and maintain Azure DevOps pipelines for all AWA components: container image build - ACR push - Notary v2 signing - AKS deployment; Terraform plan - policy check - apply; Agent Regression Testing gate on every PR.
• AKS operations: Manage the 5-namespace AKS cluster - namespace isolation, Network Policies, Pod Disruption Budgets, KEDA autoscaling rules based on Kafka consumer lag, OPA Gatekeeper admission policies, Workload Identity bindings for all agent pods.
• Container governance: Manage ACR, enforce Notary v2 image signing, configure vulnerability scanning, maintain the approved-image ConfigMap used by OPA Gatekeeper admission control.
• Secret and certificate management: Own Azure Key Vault configuration - access policies per managed identity, automatic TLS certificate rotation, secret rotation schedules, audit of all secret access events.
• Monitoring and alerting: Configure Azure Monitor alert rules and Log Analytics KQL queries for SLA breach, error rate spike, pod crash loop, token budget breach, and Kafka consumer lag; maintain PagerDuty escalation paths.
• Security posture: Work with the AI Security Engineer to implement Azure Policy assignments, Defender for Cloud recommendations, Firewall rule reviews, and Private Endpoint configurations; maintain the AWA network topology diagram.
• Disaster recovery: Maintain and test DR procedures: failover to UAE South replica for ADLS Gen2, Azure AI Foundry PTU - PAYG - DR endpoint routing, Orkes cluster recovery, RTO/RPO validation.