Azure DevOps Engineer

Sonatype; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Parental leave

Diversity & Inclusion groups

Flexible working

Job summary

Sonatype is seeking an Azure DevOps Engineer to design, automate, and scale our engineering platform on Azure. You will lead infra modernization, improve reliability, and guide teams on DevOps best practices to ship securely and quickly.

You will collaborate with engineering to improve build and deployment workflows across microservices and cloud-native apps, while strengthening security and observability across platforms.

Qualifications

• Experience designing and maintaining CI/CD pipelines for multiple stacks.
• Hands-on Azure cloud expertise across compute, storage, security, and networking.
• Proficiency with IaC using Terraform, Bicep, or ARM templates.
• Containerized workloads with Kubernetes and AKS.
• Scripting for automation and tooling; strong collaboration skills.

Responsibilities

• Design, implement, and evolve Azure-based infra with IaC.
• Build and maintain scalable CI/CD pipelines using Azure DevOps.
• Administer Azure DevOps services and workflows across teams.
• Improve build, release, and deployment for microservices.
• Implement observability, monitoring, and security controls.
• Mentor engineers on Azure architecture and DevSecOps practices.

Skills

Azure DevOps

CI/CD pipelines

Terraform/Bicep/ARM

Kubernetes (AKS)

Scripting (Python/PowerShell)

Security/Observability

Job description

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.

As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.

More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.

At Sonatype, we empower developers with best‑in‑class tools to build secure, high‑quality software at scale. Our mission is to create a world where software is always secure and developers can innovate without fear. Trusted by thousands of organizations, including Fortune 500 companies, we are pioneers in software supply chain management, open‑source security, and DevSecOps.

We are looking for an Azure DevOps Engineer to help us shape the future of secure software development.

As an Azure DevOps Engineer, you will play a critical role in designing, automating, and scaling Sonatype's engineering platform and delivery systems on Azure. You will lead infrastructure and CI/CD modernization, improve reliability and security, and guide teams on platform engineering and DevOps best practices.

Why This Role Matters

This role helps create the engineering foundation that enables teams to ship securely, reliably, and quickly. You will influence how Sonatype scales its platform capabilities, improves developer experience, and advances its DevSecOps maturity on Azure.

You will work at the intersection of infrastructure, automation, security, and developer enablement, making a direct impact on product velocity and operational excellence.

Key Responsibilities

• Design, implement, and evolve Azure-based infrastructure using Infrastructure as Code with Terraform, Bicep, or ARM templates.
• Build and maintain scalable CI/CD pipelines using Azure DevOps Pipelines for application, infrastructure, and platform workloads.
• Administer and optimize Azure DevOps services, including Azure Repos, Pipelines, Artifacts, Boards, and service connections.
• Partner with engineering teams to improve build, release, and deployment workflows across microservices and cloud-native applications
• Implement robust observability across systems using Azure Monitor, Log Analytics, Application Insights, and related monitoring tooling.
• Strengthen platform security by integrating secrets management, policy enforcement, vulnerability scanning, and least-privilege access controls.
• Manage and optimize containerized environments using Kubernetes, Helm, and Azure Kubernetes Service (AKS).
• Drive reliability engineering practice, including incident responses, root cause analysis, SLO thinking, and automated remediation, where appropriate.
• Standardize reusable templates, modules, and platform patterns that improve developer productivity and consistency.
• Mentor engineers and provide technical leadership on Azure architecture, deployment automation, release governance, and DevSecOps practices.

What We Are Looking For

• Strong experience with Azure DevOps and CI/CD pipeline design for multiple application stacks and deployment patterns.
• Deep hands‑on expertise with Microsoft Azure, including compute, networking, identity, storage, monitoring, and security services
• Experience with Infrastructure as Code using Terraform, Bicep, ARM, or equivalent automation frameworks.
• Proficiency with containers and orchestration platforms such as Docker and Kubernetes, preferably with AKS experience.
• Experience with scripting and automation using Python, Bash, PowerShell, or similar languages.
• Solid understanding of source control workflows, package management, artifact promotion, and release strategies.
• Experience implementing observability, logging, alerting, and operational dashboards for production systems.
• Strong understanding of cloud security, IAM, secrets management, compliance controls, and secure software delivery practices.
• Excellent collaboration and communication skills, with the ability to influence technical direction across teams.

What Would Be Nice To Have

• Experience with GitHub, SonarQube, Nexus Repository, or software supply chain security tooling.
• Familiarity with multi-cloud environments and migration patterns from AWS or on-premises platforms
• Exposure to policy-as-code, platform engineering, developer portals, or internal developer platform concepts.
• Experience supporting regulated or enterprise-scale environments with strong governance requirements.

Things That We Are Proud Of

• 2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing!
• 2025 AI Compliance Solution of the Year - AI Breakthrough Awards
• 2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology
• 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
• Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024
• Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year."
• SD Times: Best in Show Security
• Fast Company Best Workplaces for Innovators 2024
• The Herd Top 100 Private Software Companies 2024.
• Diversity & Inclusion Working Groups
• Parental Leave Policy
• Paid Volunteer Time Off (VTO)

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal‑opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.