Azure Engineer

Openkyber; United States; On-site; USD 160,000 - 210,000; Full time

Job summary

Openkyber in the United States is hiring a Senior DevSecOps Engineer to design and secure a cloud-native platform on Microsoft Azure, focusing on compliance evidence management and secure data ingestion.

You will build secure ingestion pipelines with APIM, event-driven workflows, immutable storage, and policy-driven IaC, partnering with security and development teams to uphold PCI-DSS, SOX, and GLBA compliance across the stack.

Qualifications

• 5+ years building production workloads on Microsoft Azure.
• Azure API Management (APIM) Policies (Inbound/Outbound XML), Backends, Named Values, Developer Portal & Versioning.
• Event-Driven & API-First Architecture.
• Azure Cosmos DB / NoSQL Database Management.
• Immutable & Append-Only Storage (WORM Blob Storage, Cosmos DB Change Feed).
• Azure Key Vault (CMK, Key Rotation, Purge Protection).
• Zero Trust Networking Private Endpoints, VNet Integration, NSG & UDR.
• Terraform (Modules, Remote State, Azure Provider).
• CI/CD using GitHub Actions or Azure DevOps.
• Strong programming experience in Python & Node.js.
• Integrated Testing & Automation.
• KQL (Kusto Query Language) for Monitoring, Alerting & Audit Analysis.
• Third-Party API Integrations (GRC, Vulnerability Scanners, Ticketing Platforms).
• Experience working in regulated environments (PCI-DSS, SOX, GLBA).

Responsibilities

• Design and build secure API ingestion pipelines using Azure APIM with OAuth2/JWT validation and rate limiting.
• Develop event-driven ingestion workflows using Azure Service Bus and Durable Azure Functions.
• Implement an immutable, tamper-evident storage solution using Azure Blob Storage (WORM policies) and Azure Cosmos DB.
• Architect high-performance query caching using Redis Cache, while maintaining source-of-truth immutability.
• Integrate Azure Key Vault for envelope encryption of stored artifacts, including managing customer-managed keys (CMK).
• Build comprehensive Log Analytics Workspace pipelines to track ingestion events, access audits, and integrity checks.
• Write all infrastructure as code using Terraform, ensuring a policy-as-code compliant environment.
• Integrate with third-party tools (e.g., GRC platforms, vulnerability scanners) to build a seamless ingestion process.

Skills

Azure cloud platform

Event-driven architecture

Security by design

Zero Trust networking

CI/CD pipelines

Python

Node.js

Infrastructure as code

Compliance & regulations

Monitoring & auditing

Tools

Azure APIM

Azure Cosmos DB

Azure Service Bus

Durable Functions

Azure Blob Storage

Azure Key Vault

Redis Cache

Terraform

GitHub Actions

Azure DevOps

Kusto (KQL)

Job description

We are building a next-generation, cloud-native platform to store and manage compliance evidence. This system will ingest data from various internal tools via secure APIs, store it with cryptographic integrity guarantees, and make it available for auditing and GRC workflows. We're looking for a Senior DevSecOps Engineer to lead the design, development, and hardening of this critical platform on Microsoft Azure.

What You'll Do

• Design and build secure API ingestion pipelines using Azure API Management (APIM) with OAuth2/JWT validation and rate limiting.
• Develop event-driven ingestion workflows using Azure Service Bus and Durable Azure Functions.
• Implement an immutable, tamper-evident storage solution using Azure Blob Storage (WORM policies) and Azure Cosmos DB.
• Architect high-performance query caching using Redis Cache, while maintaining source-of-truth immutability.
• Integrate Azure Key Vault for envelope encryption of stored artifacts, including managing customer-managed keys (CMK).
• Build comprehensive Log Analytics Workspace pipelines to track ingestion events, access audits, and integrity checks.
• Write all infrastructure as code using Terraform, ensuring a policy-as-code compliant environment.
• Integrate with third-party tools (e.g., GRC platforms, vulnerability scanners) to build a seamless ingestion process.

Requirements

• 5+ years building production workloads on Microsoft Azure
• Azure API Management (APIM) Policies (Inbound/Outbound XML), Backends, Named Values, Developer Portal & Versioning
• Event-Driven & API-First Architecture
• Azure Cosmos DB / NoSQL Database Management
• Immutable & Append-Only Storage (WORM Blob Storage, Cosmos DB Change Feed)
• Azure Key Vault (CMK, Key Rotation, Purge Protection)
• Zero Trust Networking Private Endpoints, VNet Integration, NSG & UDR
• Terraform (Modules, Remote State, Azure Provider)
• CI/CD using GitHub Actions or Azure DevOps
• Strong programming experience in Python & Node.js
• Integrated Testing & Automation
• KQL (Kusto Query Language) for Monitoring, Alerting & Audit Analysis
• Third-Party API Integrations (GRC, Vulnerability Scanners, Ticketing Platforms)
• Experience working in regulated environments (PCI-DSS, SOX, GLBA)