Azure DevOps Engineer

Provoke Solutions; Long Beach (CA); On-site; USD 171,924,000 - 286,541,000; Full time

Job summary

Provoke Solutions is seeking an experienced Azure DevOps Engineer to join onsite in Long Beach, CA, driving a regulated migration to Azure with secure, auditable pipelines and IaC-based infrastructure.

You will design landing zones, govern workloads, and collaborate across development, security, risk, and compliance teams to ensure a compliant and resilient cloud foundation.

Qualifications

• 5+ years in a DevOps, platform, or cloud engineering role with hands-on Microsoft Azure experience.
• Practical experience with infrastructure-as-code (Terraform, Bicep, or ARM) in production.
• Solid scripting and automation skills (PowerShell, Bash, or Python).
• Working knowledge of containerization and orchestration (Docker, Kubernetes / Azure Kubernetes Service).
• Experience implementing CI/CD with automated testing, security scanning, and controlled release gates.

Responsibilities

• Design and implement Azure landing zones, subscriptions, and governance guardrails aligned to regulatory and internal control requirements.
• Build and maintain CI/CD pipelines in Azure DevOps or GitHub Actions with full audit trails and approval gates.
• Develop infrastructure-as-code using Terraform, Bicep, or ARM templates to provision reproducible environments with GitOps practices.
• Lead the migration of on-premises workloads to Azure—re-hosting, re-platforming, and re-architecting as needed.
• Embed security and compliance controls into the delivery lifecycle (DevSecOps) including secrets management and vulnerability scanning.
• Establish cost visibility and governance for cloud resources to keep spend predictable during migration.

Skills

Azure DevOps

GitHub Actions

Terraform

Bicep

ARM templates

PowerShell

Python

Docker

Kubernetes

Azure Policy

Tools

Azure DevOps

Terraform

Kubernetes

Job description

Location

Location: Onsite 3 days/week - Long Beach, CA

Who We Are

Provoke is a global consulting firm building AI-native solutions that transform how work gets done. Founded on a culture of innovation, growth, and curiosity, we partner with global clients to design and deploy agentic AI embedded directly into workflows so teams move faster, think smarter, and scale with purpose.

Overview

We're looking for an experienced Azure DevOps Engineer to join our consulting team and work on-site with one of our clients, a regulated organization undertaking a strategic migration from on-premises infrastructure to Microsoft Azure. As a Provoke consultant embedded with the client, you will design, build, and operate the CI/CD pipelines, infrastructure-as-code, and cloud platform foundations that carry their workloads through this transition. This is a hands-on engineering role at the center of the client's cloud journey, working across their development, operations, security, and compliance teams to deliver a secure, auditable, and resilient landing zone.

Why This Role

• Real ownership of a landing zone build, not a maintenance role on an already-mature environment.
• A chance to shape how a regulated organization approaches automation, governance, and audit-readiness from the ground up.
• Exposure across development, security, risk, and compliance functions, broadening your footprint beyond a single team.

Key Responsibilities

• Design and implement Azure landing zones, subscriptions, and governance guardrails (management groups, Azure Policy, RBAC) aligned to regulatory and internal control requirements.
• Build and maintain CI/CD pipelines in Azure DevOps (and/or GitHub Actions) that automate build, test, security scanning, and deployment with full audit trails and approval gates.
• Develop infrastructure-as-code using Terraform, Bicep, or ARM templates to provision reproducible, version-controlled environments, following GitOps practices so infrastructure changes are reviewed and deployed the same way as application code.
• Lead the migration of on-premises workloads to Azure - assessing, re-hosting, re-platforming, and re-architecting applications and data as appropriate.
• Implement observability across the platform: centralized logging, monitoring, and alerting via Azure Monitor, Log Analytics, and Application Insights.
• Embed security and compliance controls into the delivery lifecycle (DevSecOps), including secrets management with Azure Key Vault, vulnerability scanning, and policy-as-code.
• Establish cost visibility and governance for cloud resources, including budgets, tagging strategy, and Azure Cost Management, so spend stays predictable through the migration.
• Automate change management and release processes so that deployments are controlled, reversible, and evidenced for audit.
• Collaborate with development, security, risk, and compliance teams to translate regulatory obligations into technical controls.
• Contribute to disaster recovery, backup, and business continuity design for cloud-hosted workloads.
• Mentor engineers on cloud-native and DevOps practices and help mature the organization's platform engineering culture.

Required Qualifications

• 5+ years in a DevOps, platform, or cloud engineering role, with demonstrable hands-on Microsoft Azure experience.
• Strong proficiency with Azure DevOps (Pipelines, Repos, Artifacts, Boards) or GitHub Actions.
• Practical experience with infrastructure-as-code (Terraform, Bicep, or ARM) in production.
• Solid scripting and automation skills (PowerShell, Bash, or Python).
• Working knowledge of containerization and orchestration (Docker, Kubernetes / Azure Kubernetes Service).
• Experience implementing CI/CD with automated testing, security scanning, and controlled release gates.
• Understanding of cloud networking, identity (Microsoft Entra ID / Azure AD), and security fundamentals.
• Experience migrating workloads from on-premises data centers to public cloud.
• Familiarity with operating in a regulated environment and producing evidence for audit and compliance.
• Comfort using AI-assisted engineering tools (GitHub Copilot, Claude Code, or similar) to accelerate pipeline authoring, IaC development, and troubleshooting, with sound judgment about where to verify AI-generated output rather than trust it outright.

Preferred Qualifications

• Relevant Azure certifications (e.g., AZ-400 DevOps Engineer Expert, AZ-104 Administrator, AZ-305 Solutions Architect).
• Experience with regulatory frameworks relevant to our industry (e.g., SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR, or FCA/PRA requirements).
• Exposure to policy-as-code and compliance automation tooling.
• Experience with hybrid connectivity (ExpressRoute, VPN, Azure Arc) during phased migrations.
• Background working alongside risk, audit, or information security functions.
• Experience with third-party observability tools (Splunk, Datadog, or Grafana) alongside Azure-native monitoring, particularly useful for hybrid visibility during a migration.

Compliance & Security Focus

This role sits at the intersection of engineering velocity and regulatory control. The successful candidate understands that in a regulated business, automation is not only about moving faster - it is about making every change controlled, evidenced, and repeatable. You will be expected to champion a "secure and compliant by default" approach: least-privilege access, immutable audit logging, segregation of duties in the release process, and controls that satisfy both internal risk teams and external regulators. Prior experience turning compliance obligations into working technical controls will set you apart.

Location

US; Long Beach, CA area. Onsite 3 days/week.

Pay Range

$60-$100/hr

Role Type & Work Authorization

• This role is offered as W2 hourly employment
• Candidates must be authorized to work in the U.S. without VISA Sponsorship