Senior Azure DevOps Engineer

Unisys; Bengaluru; On-site; INR 2,800,000 - 3,600,000; Full time

Job summary

Unisys seeks a seasoned DevOps/Cloud Engineer to design and automate Azure infrastructure using Bicep and AVM, including VWAN, VNets, App Gateway, and Key Vault. You will build robust CI/CD pipelines and implement DevSecOps across deployments.

You will automate compute/storage resources, container workloads (ACA/ACR), and maintain modular libraries with AVM standards while ensuring security and governance across environments.

Qualifications

• Minimum 5 years of hands-on experience as a DevOps/Cloud/Infra Automation engineer.
• Deep expertise with Infrastructure as Code using Azure Bicep and AVM.
• Strong experience with core Azure networking and security services (VWAN, VHUB, VNets, NSGs, Private Endpoints, App GW, Key Vault).
• Proficient in Azure DevOps pipelines (multi-stage YAML) and release governance.

Responsibilities

• Design, implement, and manage IaC solutions with Azure Bicep and AVM.
• Provision and automate networking architectures (VWAN, VHUB, VNets, NSGs, Private DNS/Endpoints).
• Automate VMs, storage, keys, and container workloads (ACA, ACR).
• Develop CI/CD pipelines, including linting, testing, and deployment gates.
• Integrate security, RBAC, Managed Identities, and secret scanning into pipelines.

Skills

Azure Bicep

AVM

Azure DevOps

Azure VNets

App Gateway

Azure VWAN

PowerShell/Azure CLI

Docker

Terraform

Tools

Azure DevOps

AVM Modules

Bicep Linter

ARM What‑If

Job description

What success looks like in this role: Responsibilities: Design, implement, and manage automated Infrastructure as Code (IaC) solutions leveraging Azure Bicep and Azure Verified Modules (AVM) to deploy, configure, and standardize enterprise landing zones and workload infrastructure. Provision, maintain, and automate core enterprise networking architectures, including Azure Virtual WAN (VWAN), Virtual Hubs (VHUB), VNets, Subnets, NSGs, Route Tables, and Private Endpoints/Private DNS Zones. Manage application traffic routing, SSL offloading, and secure entry points using Azure Application Gateway (App GW) / WAF. Support compute and storage lifecycles by automating the deployment and configuration of Azure Virtual Machines (VMs), Storage Accounts, and Azure Key Vault for secure secret/certificate management. Support containerized application workloads by implementing, configuring, and maintaining Azure Container Apps (ACA) and Azure Container Registry (ACR). Develop, maintain, and optimize robust Azure DevOps CI/CD pipelines (multi-stage YAML) to automate validation (Bicep linting, what-if analysis), testing, and deployment of both infrastructure and application workloads. Manage, curate, and contribute to internal module libraries using AVM standards, establishing best practices for parameterization, tagging, telemetry, and reusable cloud infrastructure components. Implement DevSecOps practices across deployment pipelines, integrating secret management, RBAC, Managed Identities, and security scanning into CI/CD workflows. Manage version control workflows, branching strategies, and release governance within Azure Repos / Git. Configure and maintain monitoring, alerting, and logging using Azure Monitor and Log Analytics across network, compute, and container workloads. Develop and enhance automation scripts using PowerShell, Azure CLI, or Bash to streamline operational tasks and recurring environment management workflows. Maintain comprehensive technical documentation, including network topology diagrams, pipeline configurations, Bicep/AVM module guides, and runbooks. #LI-SN1

You will be successful in this role if you have: Minimum 5 years of hands‑on experience as a DevOps Engineer, Cloud Engineer, or Infrastructure Automation Engineer. Deep hands‑on expertise with Infrastructure as Code (IaC) using Azure Bicep, with demonstrated experience leveraging and implementing Azure Verified Modules (AVM). Strong, proven experience with core Microsoft Azure Services: Networking: Azure Virtual WAN (VWAN), Virtual Hub (VHUB), VNets, Subnets, Network Security Groups (NSGs), Route Tables, and Private Endpoints. Traffic & Security: Azure Application Gateway (App GW / WAF) and Azure Key Vault. Compute & Containers: Azure Container Apps (ACA), Azure Virtual Machines (VMs), and ACR. Storage: Azure Storage Accounts (Blob, File shares, Data Lake, Access tiers, and network access restrictions). Strong proficiency in designing and implementing Azure DevOps Pipelines (multi-stage YAML pipelines, service connections, environments, approvals, and deployment gates). Strong scripting and automation skills using PowerShell, Azure CLI, or Bash (Python is a plus). Solid understanding of cloud security fundamentals, including Azure RBAC, Entra ID (Azure AD), and Managed Identities. Hands‑on experience with containerization fundamentals (Docker) and deploying microservices to Azure Container Apps. Experience with IaC validation and testing tools (Bicep linter, ARM what‑if operations, PSRule). Experience with monitoring, diagnostics, and telemetry using Azure Monitor, Log Analytics, and Network Watcher. Excellent documentation, analytical troubleshooting, and communication skills. Relevant Azure certifications (e.g., AZ‑104: Azure Administrator Associate, AZ‑700: Azure Network Engineer Associate, or AZ‑400: DevOps Engineer Expert) are an added advantage.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law. Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [e-mail]. US job seekers can find more information about Unisys' EEO commitment here. Unisys is a global technology solutions company that powers breakthroughs for the world’s leading organizations. Our solutions – cloud, AI, digital workplace, logistics and enterprise computing – help our clients challenge the status quo and unlock their full potential. To learn how we have been helping clients push what’s possible for more than 150 years, visit unisys.com and follow us on LinkedIn. https://www.unisys.com/unisys-legal/recruiting Notice for U.S. Applicants: Unisys is an Equal Opportunity Employer - Minorities/ Females/ Veterans/ Individuals with Disabilities/ Sexual Orientation/ Gender Identity