Senior Azure DevOps Engineer

OpsTree Solutions; Mumbai; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

OpsTree Solutions in Mumbai is seeking experienced DevOps Engineers to design, build, and optimise CI/CD pipelines for a VDI platform operating across hybrid cloud and on‑prem environments. The role emphasises Kubernetes based orchestration.

You will manage Terraform configurations, IaC, and Helm charts, maintain security hardening, and lead incident response while ensuring high availability across multi‑node Kubernetes architectures.

Qualifications

• 7+ years of hands-on DevOps or platform engineering experience (CNI/ingress, storage, autoscaling, and security hardening).
• Hands-on experience with managed Kubernetes services — AKS, EKS, or GKE.
• Strong proficiency in Terraform — infrastructure provisioning, module development, and IaC best practices.
• Hands-on experience with CI/CD tools — Jenkins, GitLab CI, GitHub Actions, or Azure DevOps.
• Solid experience with Docker — container builds, multi-stage Dockerfiles, image optimisation, and registry management.

Responsibilities

• Design, build, and maintain CI/CD pipelines for VDI platform components — OS images, backend services, and client applications.
• Manage pipeline tooling — Jenkins, GitLab CI, GitHub Actions, or Azure DevOps Pipelines.
• Implement automated build, test, and deployment workflows for Linux and Windows OS.
• Maintain pipeline-as-code practices — version controlled, reproducible, and environment infrastructure as code (IaC).
• Write and maintain Terraform configurations for provisioning cloud (AWS/Azure/GCP).

Skills

Kubernetes

Scripting

Cloud & On-premises experience

Security hardening

Incident response leadership

Education

B.Tech/B.E. in Computer Science or Engineering

Tools

Terraform

Jenkins

GitLab CI

GitHub Actions

Azure DevOps Pipelines

Docker

Kubernetes (AKS/EKS/GKE)

Ansible

Helm

Job description

We are looking for experienced DevOps Engineers to build, maintain, and optimise the CI/CD pipelines, infrastructure automation, and platform operations for a VDI offering running across hybrid cloud and on‑premises environments. The role has a strong emphasis on Kubernetes based container orchestration.

Key Responsibilities

• Design, build, and maintain CI/CD pipelines for VDI platform components — OS images, backend services, and client applications.
• Manage pipeline tooling — Jenkins, GitLab CI, GitHub Actions, or Azure DevOps Pipelines.
• Implement automated build, test, and deployment workflows for Linux and Windows OS.
• Maintain pipeline‑as‑code practices — version controlled, reproducible, and environment infrastructure as code (IaC).
• Write and maintain Terraform configurations for provisioning cloud (AWS/Azure/GCP).
• Manage Terraform state, modules, workspaces, and remote backends for multi‑environment deployments.
• Implement infrastructure change management processes — plan, review, and apply workflows with approvals.
• Use Ansible or DSC for configuration management and OS‑level provisioning across VDI.
• Deploy, manage, and operate Kubernetes clusters (AKS/EKS/GKE and self‑managed) for VDI microservices.
• Design and maintain multi‑node, multi‑namespace Kubernetes architectures for high availability and workload isolation.
• Manage Helm charts — chart development, versioning, value overrides, and repository management.
• Implement Kubernetes RBAC — role bindings, service accounts, and namespace‑level access controls.
• Configure and manage Kubernetes networking — CNI plugins (Calico, Flannel, Cilium), ingress controllers (NGINX, Traefik).
• Set up and manage Kubernetes storage — persistent volumes, storage classes, and dynamic provisioning.
• Implement Kubernetes autoscaling — HPA, VPA, and cluster autoscaler for VDI workload.
• Implement GitOps workflows using ArgoCD or Flux for declarative Kubernetes deployments.
• Enforce Kubernetes security hardening — Pod Security Standards, OPA/Gatekeeper policies, and secrets encryption.
• Implement service mesh (Istio or Linkerd) for inter‑service mTLS, traffic management, and observability.
• Manage and operate VDI infrastructure across cloud (AWS/Azure/GCP) and on‑premises.
• Maintain networking components — VPCs, subnets, security groups, load balancers, VPNs, and SD‑WAN connectivity.
• Oversee on‑prem hypervisor infrastructure — VMware vSphere, KVM, or Hyper‑V clusters supporting VDI workloads.
• Set up and maintain monitoring stacks — Prometheus, Grafana, ELK/EFK, Loki, or Azure Monitor.
• Implement Kubernetes‑native monitoring — kube‑state‑metrics, metrics‑server, and custom exporters.
• Define SLOs/SLAs and alerting rules for critical VDI infrastructure and Kubernetes workloads.
• Participate in on‑call rotations and lead incident response and post‑mortem processes.
• Implement DevSecOps practices — SAST/DAST tooling, container scanning (Trivy, Snyk), and secrets management.
• Manage secrets using HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.
• Enforce CIS Benchmark compliance and Kubernetes security baselines across environments.
• Support ISO 27001 and SOC 2 audit requirements through infrastructure controls.

Required Skills & Qualifications

• 7+ years of hands‑on DevOps or platform engineering experience (CNI/ingress, storage, autoscaling, and security hardening).
• Hands‑on experience with managed Kubernetes services — AKS, EKS, or GKE.
• Strong proficiency in Terraform — infrastructure provisioning, module development, and IaC best practices.
• Hands‑on experience with CI/CD tools — Jenkins, GitLab CI, GitHub Actions, or Azure DevOps.
• Solid experience with Docker — container builds, multi‑stage Dockerfiles, image optimisation, and registry management.
• Experience managing hybrid infrastructure — cloud (AWS/Azure/GCP) and on‑premises. Policy, and Azure DevOps.
• Proficiency in scripting — Python, Bash, and/or PowerShell.
• Working knowledge of Ansible or equivalent configuration management tooling.
• B.Tech/M.Tech in Computer Science, Engineering, or related field.

Preferred Certifications

• CKA — Certified Kubernetes Administrator (highly recommended).
• CKS — Certified Kubernetes Security Specialist.
• AZ‑305 — Microsoft Azure Solutions Architect Expert.
• AWS Certified DevOps Engineer Professional.
• GCP Professional DevOps Engineer.

Preferred Skills

• Experience with GitOps workflows — ArgoCD or Flux for Kubernetes deployments.
• Experience with service mesh — Istio or Linkerd for inter‑service communication and mTLS.
• Familiarity with OPA/Gatekeeper for Kubernetes policy enforcement.
• Knowledge of DevSecOps — pipeline security scanning, IaaC security tools (tfsec, Checkov).
• Experience with Azure Virtual Desktop (AVD) or VDI platform infrastructure.