Job Description:
Design, IaC and Automation:- Maintain and improve Terraform‐based templates for consistent, repeatable infrastructure deployments.
- Leverage best practices for version control (Git branching strategies) and code reviews to minimize drift between dev, test, and prod environments.
Patch and Pipeline Management:
- Develop and maintain patch scripts and pipelines (Azure Update Manager or similar) to automate OS or platform patching.
- Coordinate with L2/L3 for safe rollouts of patches and to minimize downtime.
Certificate and Secrets Management:
- Create, rotate, and securely store certificates, secrets, and SSH keys using Azure Key Vault or appropriate vaulting solutions.
- Ensure compliance with organizational policies on encryption and key rotation intervals.
- CI/CD Enhancements.
- Continuously improve CI/CD pipelines (Azure DevOps, GitHub Actions, etc) for new or updated Azure resources.
- Embed security scanning, linting, and compliance checks at various stages of the pipeline.
Environment Consistency and Governance:
- Implement tooling to maintain consistent dev/test/prod environments, ensuring the IaC definitions match reality (no “drift”).
- Work with L3 to enforce governance policies (Azure Policy, RBAC, tagging standards) in all deployed environments.
- Security and Compliance in DevOps.
- Integrate security scanning tools into pipelines for early detection of vulnerabilities.
- Work closely with security teams to address compliance requirements (e.g., HIPAA, HITRUST, or internal corporate standards).
Skill Set:
- Strong background in Terraform, version control (Git), and pipeline tooling (Azure DevOps, GitHub).
- Familiar with modern DevOps practices (GitOps, continuous testing).
- Comfortable working closely with development teams, L3, and security teams to implement infrastructure changes effectively and securely.
- Typically, a smaller team of Cloud Engineers can support multiple projects if they have well‐defined pipelines and documentation.