Senior DevOps Engineer (Azure Infrastructure & Networking)

Bonapolia; Warszawa; On-site; PLN 306,000 - 437,000; Full time

Job summary

Bonapolia is seeking a Senior DevOps Engineer to design and operate Azure infrastructure for a US‑based client, including security, identity, and hybrid networking. The role covers IaC deployment via GitHub pipelines, Entra ID and M365 migrations, and managing VPN/ FortiGate connectivity.

The candidate will work in a global context with EST alignment and start ASAP, focusing on scalable cloud solutions and reliable networking for enterprise workloads.

Qualifications

• Hands-on experience with Azure: Entra ID, SharePoint, networking.
• Strong networking and VPN skills.
• Windows Server administration.
• Experience with infrastructure as code using Bicep or Terraform.
• Experience managing Microsoft 365 identity and migrations.

Responsibilities

• Build and run cloud infrastructure in Azure for a US‑based client.
• Implement IaC using Bicep or Terraform deployed via GitHub pipelines.
• Manage hybrid networking including Azure VPN Gateway and FortiGate.
• Migrate and manage Microsoft 365 identity, SharePoint and OneDrive.
• Monitor security with Defender and Log Analytics; troubleshoot latency or routing issues.

Skills

Azure

Microsoft 365

Identity

Networking

IaC (Bicep/Terraform)

GitHub pipelines

Entra ID

SharePoint

OneDrive

Intune

Windows Server

Azure VPN Gateway

FortiGate

Tools

Terraform

Bicep

GitHub Actions

FortiGate

Azure Functions

Azure Key Vault

Azure Virtual Desktop

Job description

Senior DevOps Engineer (Azure Infrastructure & Networking)

Employment: Full-time
Location: Europe
Client time zone: US Eastern Time (EST), to work according to EST at least 50% of the time
Start date: ASAP

About the Role

We are looking for a Senior DevOps Software Engineer with strong hands‑on experience in Microsoft Azure, Microsoft 365, identity, and hybrid networking. You will build and run cloud infrastructure for a client based in the US Eastern time zone(to work according to EST at least 50% of the time).

Key Requirements

The first three areas are the most important for this role.

1. Azure environment setup

• Building an Azure environment from the ground up: management groups, subscriptions, Azure Policy, RBAC/PIM

• Setting up Log Analytics and Microsoft Defender

• Infrastructure as Code in Bicep or Terraform, deployed through GitHub pipelines

2. Microsoft 365 and identity

• Entra ID with cloud sync from on‑premises Active Directory

• Intune, Conditional Access, Windows Hello

• SharePoint and OneDrive migration

3. Hybrid networking

• Azure VPN Gateway with BGP over multiple circuits

• Hub‑and‑spoke network design with a FortiGate firewall

• Troubleshooting latency, jitter and asymmetric routing

4. Applications and data

• Azure Functions with VNet integration

• Azure Key Vault

• Azure Virtual Desktop (AVD)

• Moving a database and its clients across a WAN, including replication, performance testing, cutover and rollback

Required Experience in Work History

Your CV should show hands‑on experience with:

• Azure: Entra ID, SharePoint, networking

• General networking and VPNs

• Windows server/instance administration

Additional Information

• The client is in the US Eastern time zone(to work according to EST at least 50% of the time).

• No vacation during the first 1–2 months of the engagement.
  What we offer

• Model: B2B contract with Bonapolia- one contract, one monthly invoice

• Rate: negotiated per candidate seniority and client budget

• Payment: monthly invoice, paid on the same schedule the client pays us (usually 30 days)

• Contract written under your country's law

• We handle the client‑side paperwork: MSA, NDA, invoicing

About Bonapolia

Bonapolia is a family‑owned IT staff augmentation team based in Lisbon. We build engineering teams for product companies and IT consultancies across Europe and the US.

More at bonapolia.com