Cloud Infrastructure & DevOps Engineer

Datamatics Technologies LLC; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Datamatics Technologies LLC in Lahore is seeking a Cloud Infrastructure & DevOps Engineer to support and administer enterprise cloud platforms hosted on Microsoft Azure.

This is primarily a cloud administration and operations role, focused on operating, maintaining, monitoring, and supporting an existing cloud platform with Terraform-based infrastructure support, GHES administration, CI/CD operations, cloud networking, IAM, monitoring, and release execution.

Qualifications

• Hands-on Azure administration and operations experience in enterprise environments.
• Terraform IaC with module design, state/backend management and drift remediation.
• GHES, GitHub Actions, self-hosted runners, and pipeline-driven Terraform deployment.
• Experience maintaining CI/CD pipelines and integrating with Azure DevOps where applicable.
• Strong knowledge of Azure networking, RBAC, Key Vault, policies and cost controls.
• Scripting skills in PowerShell, Bash, or Python; ability to automate tasks.

Responsibilities

• Administer Azure subscriptions, resource groups, networking, and landing zones.
• Maintain Terraform modules, state/backends, and CI/CD workflows; manage drift remediation.
• Operate GHES, workflows, and self-hosted runners; support Azure DevOps integration.
• Ensure changes are deployed through CI/CD pipelines, not manual portal changes.
• Monitor health, security alerts, incidents, and perform RCA inputs and problem tracking.
• Execute controlled releases, deployments, and rollback procedures.

Skills

Azure administration

Terraform IaC

GHES & Actions

CI/CD pipelines

Scripting: PowerShell

RBAC & Secrets Management

Monitoring & incident management

Tools

Terraform

GitHub Enterprise Server (GHES)

GitHub Actions

Azure DevOps

Job description

Cloud Infrastructure & DevOps Engineer

Experience Required: Min 3 Years

Full-Time Job

Role Summary

We are seeking a Cloud Infrastructure & DevOps Engineer to support and administer enterprise cloud platforms hosted on Microsoft Azure. This is primarily a cloud administration and operations role, focused on operating, maintaining, monitoring, and supporting an existing cloud platform rather than designing or building new platform components. The role includes Terraform-based infrastructure support, GitHub Enterprise Server (GHES) administration, CI/CD operations, cloud networking, identity management, monitoring, and release execution.

Key Responsibilities

• Administer Citadel Platform and AI Application Landing Zones, including Azure subscriptions, resource groups, networking, identity, RBAC, policies, Key Vault/secrets, monitoring and cost controls.
• Own Terraform-based Infrastructure as Code: maintain modules, providers, variables, state/backends, workspaces, plan/apply workflows, drift detection and remediation.
• Operate CI/CD pipelines on GitHub Enterprise Server (GHES), including workflows and self-hosted runners; support Azure DevOps integration where applicable.
• Ensure infrastructure and configuration changes are version-controlled and deployed through approved CI/CD processes rather than manual portal changes.
• Monitor platform health, availability, capacity, security alerts and integration failures; support incident triage, RCA inputs and recurring problem tracking.
• Execute controlled releases, deployment verification and rollback procedures in line with approved change-management processes.
• Troubleshoot network, identity, API, data-access and connectivity issues across Azure, GCP and on-premise dependencies.
• Maintain operational runbooks, deployment checklists, configuration/environment inventories and handover documentation; conduct knowledge transfer.

Must-Have Skills

• Minimum 3 years of hands-on Microsoft Azure administration and operations experience.
• Experience supporting and operating enterprise Azure environments.
• Strong hands-on experience with Terraform and Infrastructure as Code (IaC).
• Experience with GitHub Enterprise Server (GHES), GitHub Actions, and self-hosted runners.
• Experience supporting and maintaining CI/CD pipelines.
• Strong understanding of Azure services, subscriptions, resource groups, and landing zones.
• Experience with Azure networking, including VNETs, DNS, routing, load balancers, and firewalls.
• Knowledge of IAM, RBAC, Policy Management, and Secrets Management.
• Experience with monitoring, logging, and alerting solutions.
• Scripting skills in PowerShell, Bash, or Python.
• Experience in release execution, deployment support, and rollback activities.
• Strong operational support and troubleshooting experience.

Good-to-Have Skills

• Experience with Docker, Kubernetes, or OpenShift.
• Exposure to DevSecOps, security scanning, and policy-as-code.
• Experience with Azure Landing Zones and cloud governance frameworks.
• Knowledge of Azure Monitor, Log Analytics, Prometheus, Grafana, or ELK/OpenSearch.
• Experience with Terraform Cloud/Enterprise.
• Familiarity with ServiceNow and ITSM processes.
• Experience working in regulated or enterprise environments.
• Knowledge of backup, disaster recovery, and high-availability solutions.

Required Experience & Skills

• 3-10 years hands-on Azure administration/operations experience in a production environment.
• Strong Azure Landing Zones, hub-spoke networking, Azure Monitor, Log Analytics, Azure Policy, RBAC, Key Vault and cloud cost-control knowledge.
• Mandatory hands-on Terraform expertise: module design, state/backend management, plan/apply workflows and drift remediation.
• Strong GitHub Enterprise Server (GHES), GitHub Actions/workflows, self-hosted runners and pipeline-driven Terraform deployment experience.
• Experience with release management, rollback planning, monitoring, incident/problem management and operational documentation.
• Working knowledge of APIM/API gateways, REST APIs, event streaming and cross-cloud/on-premise connectivity.

Preferred Certifications

Strongly preferred: Microsoft Azure Administrator Associate (AZ-104). Additional preferred certifications: Azure DevOps Engineer Expert (AZ-400), HashiCorp Terraform Associate, GitHub Actions, Azure Security Engineer Associate (AZ-500) or Identity and Access Administrator (SC-300). Google Cloud Associate Cloud Engineer is an advantage.

Key Deliverables

Operational runbooks; environment/configuration inventory; monitoring and incident register; current IaC/CI-CD repository; deployment/rollback procedures; knowledge-transfer and handover pack.