DevOps Engineer

Natus Sensory Inc.; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Natus Sensory Inc. seeks an Azure Cloud and DevSecOps SME to own the architecture, engineering, automation, security, governance, cost optimization, and operational maturity of Azure environments and delivery platforms.

This hands-on role establishes cloud standards, builds reusable patterns, and partners with application, security, finance, product, and operations teams to deliver secure, observable, and cost‑effective services.

Qualifications

• Extensive hands-on experience architecting, implementing, securing, and operating enterprise Microsoft Azure environments.
• Expertise with Azure DevOps Pipelines and/or GitHub Actions, including YAML pipelines, templates, reusable workflows, environments, approvals, artifacts, variables, and release controls.
• Strong Infrastructure as Code experience with Terraform and/or Bicep/ARM, including modules, remote state, dependency management, validation, and environment promotion.
• Deep knowledge of Azure networking, Microsoft Entra ID, RBAC, managed identities, Key Vault, Azure Policy, Defender for Cloud, and Azure Monitor.
• Experience with Azure compute and platform services such as Virtual Machines, App Service, Functions, AKS, Container Registry, Storage, SQL, and managed databases.
• Strong scripting and automation skills using PowerShell and Azure CLI; working knowledge of Bash, JSON, YAML, and REST APIs.
• Experience integrating security and quality controls into Git‑based pipelines, including pull requests, code review, secret scanning, SAST, dependency/container scanning, policy gates, approvals, artifact versioning, rollback, and auditable deployment records.
• Ability to diagnose cross‑platform problems and design for high availability, backup, disaster recovery, business continuity, scalability, performance, and cost optimization.
• Excellent documentation, stakeholder communication, technical leadership, and mentoring skills.

Responsibilities

• Serve as the technical authority for Azure architecture, platform engineering, networking, identity, security, governance, resiliency, and operations.
• Design landing zones, management-group and subscription structures, resource organization, naming, tagging, policy, and role-based access-control standards.
• Build and maintain CI/CD pipelines using Azure DevOps and/or GitHub Actions for application, database, container, and infrastructure deployments.
• Develop reusable Infrastructure as Code using Terraform and/or Bicep/ARM, with version control, peer review, automated validation, testing, and controlled promotion between environments.
• Implement secure pipeline practices including workload identity or service connections, secrets management, artifact integrity, dependency scanning, SAST, container scanning, approvals, and separation of duties.
• Architect Azure networking, including VNets, subnets, NSGs, routing, private endpoints, Private DNS, VPN/ExpressRoute, Application Gateway, WAF, Load Balancer, and Azure Firewall patterns.
• Design identity and privileged‑access solutions using Microsoft Entra ID, managed identities, RBAC, Conditional Access, MFA, PIM, and least‑privilege principles.
• Establish monitoring and observability through Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, diagnostic settings, and actionable operational runbooks.
• Own Azure cost optimization and FinOps execution: establish budgets and alerts; analyze Cost Management, Advisor, utilization, and billing data; eliminate waste; right‑size resources; schedule non‑production workloads; optimize storage; and evaluate Reservations, Savings Plans, licensing, and architectural alternatives.
• Create a prioritized savings backlog with documented baselines, forecasts, owners, target dates, realized savings, avoided costs, and validation that changes do not introduce unacceptable operational or security risk.
• Lead technical reviews, troubleshoot complex deployment and cloud‑platform issues, perform root‑cause analysis, and drive durable corrective actions.
• Create architecture diagrams, pipeline standards, implementation guides, operational procedures, and evidence supporting security, compliance, and change management.
• Mentor engineers and collaborate with development, database, networking, security, quality, product, and vendor teams.

Skills

Azure architecture

Azure DevOps

GitHub Actions

Terraform

Bicep/ARM

Azure Networking

Microsoft Entra ID

RBAC

Key Vault

Azure Monitor

PowerShell

Azure CLI

Tools

Terraform

Bicep/ARM

Azure DevOps

GitHub Actions

Azure CLI

PowerShell

Job description

Position Summary:

The Azure Cloud and CI/CD Subject Matter Expert owns the architecture, engineering, automation, security, governance, cost optimization, and operational maturity of Microsoft Azure environments and software delivery platforms. This hands‑on role establishes cloud and Dev SecOps standards, builds reusable infrastructure and deployment patterns, and partners with application, security, finance, product, and operations teams to deliver secure, resilient, observable, and cost‑effective services.

CRITICAL PRIORITY - AZURE COST SAVINGS: Continuously identify, quantify, prioritize, and deliver measurable Azure savings while protecting availability, security, performance, and business requirements.

Key Responsibilities

• Serve as the technical authority for Azure architecture, platform engineering, networking, identity, security, governance, resiliency, and operations.


• Design and implement landing zones, management-group and subscription structures, resource organization, naming, tagging, policy, and role-based access-control standards.


• Build and maintain CI/CD pipelines using Azure DevOps and/or GitHub Actions for application, database, container, and infrastructure deployments.


• Develop reusable Infrastructure as Code using Terraform and/or Bicep/ARM, with version control, peer review, automated validation, testing, and controlled promotion between environments.


• Implement secure pipeline practices including workload identity or service connections, secrets management, artifact integrity, dependency scanning, SAST, container scanning, approvals, and separation of duties.


• Architect Azure networking, including VNets, subnets, NSGs, routing, private endpoints, Private DNS, VPN/ExpressRoute, Application Gateway, WAF, Load Balancer, and Azure Firewall patterns.


• Design identity and privileged‑access solutions using Microsoft Entra ID, managed identities, RBAC, Conditional Access, MFA, PIM, and least‑privilege principles.


• Establish monitoring and observability through Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, diagnostic settings, and actionable operational runbooks.


• Own Azure cost optimization and FinOps execution: establish budgets and alerts; analyze Cost Management, Advisor, utilization, and billing data; eliminate waste; right‑size resources; schedule non‑production workloads; optimize storage; and evaluate Reservations, Savings Plans, licensing, and architectural alternatives.


• Create a prioritized savings backlog with documented baselines, forecasts, owners, target dates, realized savings, avoided costs, and validation that changes do not introduce unacceptable operational or security risk.


• Lead technical reviews, troubleshoot complex deployment and cloud‑platform issues, perform root‑cause analysis, and drive durable corrective actions.


• Create architecture diagrams, pipeline standards, implementation guides, operational procedures, and evidence supporting security, compliance, and change management.


• Mentor engineers and collaborate with development, database, networking, security, quality, product, and vendor teams.

Required Qualifications

• Extensive hands‑on experience architecting, implementing, securing, and operating enterprise Microsoft Azure environments.


• Expertise with Azure DevOps Pipelines and/or GitHub Actions, including YAML pipelines, templates, reusable workflows, environments, approvals, artifacts, variables, and release controls. Azure Cloud & CI/CD SME


• Confidential recruiting document JOB REQUISITION | CLOUD ENGINEERING & DEVOPS


• Strong Infrastructure as Code experience with Terraform and/or Bicep/ARM, including modules, remote state, dependency management, validation, and environment promotion.


• Deep knowledge of Azure networking, Microsoft Entra ID, RBAC, managed identities, Key Vault, Azure Policy, Defender for Cloud, and Azure Monitor.


• Experience with Azure compute and platform services such as Virtual Machines, App Service, Functions, AKS, Container Registry, Storage, SQL, and managed databases.


• Strong scripting and automation skills using PowerShell and Azure CLI; working knowledge of Bash, JSON, YAML, and REST APIs.


• Experience integrating security and quality controls into Git‑based pipelines, including pull requests, code review, secret scanning, SAST, dependency/container scanning, policy gates, approvals, artifact versioning, rollback, and auditable deployment records.


• Ability to diagnose cross‑platform problems and design for high availability, backup, disaster recovery, business continuity, scalability, performance, and cost optimization. Demonstrated experience delivering measurable Azure savings using Cost Management, Azure Advisor, budgets, tagging, right‑sizing, Reservations, Savings Plans, Hybrid Benefit, storage lifecycle controls, and workload scheduling.


• Excellent documentation, stakeholder communication, technical leadership, and mentoring skills.

Preferred Qualifications

• Seven or more years in infrastructure, cloud, platform engineering, or DevOps, including at least four years of substantial Azure experience.


• Microsoft Azure and/or HashiCorp Terraform certification, supported by advanced production experience.


• Experience in regulated healthcare or another environment handling PHI, PII, or sensitive data, with knowledge of HIPAA, SOC 2, ISO 27001, NIST, or CIS controls.


• Experience with Kubernetes/AKS, Docker, Helm, GitOps, service mesh, or container‑platform security.


• Experience creating cloud‑cost dashboards, forecasts, showback/chargeback reporting, unit‑cost metrics, and executive savings reports.


• Experience supporting tenant or subscription migrations, Azure Enterprise Agreement/billing structures, and multi‑subscription governance.