DevOps & Cloud Engineering

Astyra Corporation; Mechanicsville (VA); Hybrid; USD 83,000 - 124,000; Full time

Job summary

Astyra Corporation is seeking a DevOps & Cloud Engineer for a 9-month contract, hybrid work model local to Mechanicsville, VA. The role focuses on building automated deployment pipelines, standardizing CI/CD practices, and ensuring secure, compliant, cost-aware cloud operations.

Responsibilities include managing CI/CD in Azure DevOps, implementing secrets management, automating SQL deployments, and maintaining observability with App Insights and dashboards.

Qualifications

• Hands-on Azure DevOps CI/CD with YAML and Classic pipelines.
• Experience deploying to Azure App Services, Functions, Containers, and APIs.
• Secure secrets and key management using Azure Key Vault.
• SQL deployment automation integrated with CI/CD.
• Logging, monitoring, and dashboards (App Insights, logs).
• Infrastructure as Code (Terraform, Bicep, ARM).
• Scripting and automation in PowerShell and/or Python.
• Production Azure administration/engineering experience.

Responsibilities

• Design, build, and maintain CI/CD pipelines in Azure DevOps for microservices and APIs.
• Establish reusable templates, release standards, and guardrails for compliant deployments.
• Implement secure secrets management with Azure Key Vault and managed identities.
• Automate database deployments (DACPAC/SQLCMD) and integrate migrations.
• Enable blue/green or automated rollback to minimize downtime and risk.
• Standardize provisioning across Dev/QA/Prod environments and codify baselines.
• Build monitoring dashboards and alerts for pipeline and deployment health.
• Uphold DevOps best practices in a compliant government environment.
• Implement Azure services and governance standards (App Services, AKS, API Gateways).
• Support least-privilege IAM (Entra ID) and identity management.
• Ensure fault-tolerance, high availability, and coordinated rollbacks.
• Monitor Azure services with App Insights and Log Analytics; triage incidents.
• Consider PCI or similar regulations; understand data flows and cost optimization.
• Collaborate with architects, developers, DBAs, and engineers on secure deployments.

Skills

CI/CD Engineering

Azure DevOps

Azure administration

Infrastructure as Code

Scripting: PowerShell

Scripting: Python

Logging & Observability

App Services/Functions/APIs

Containers/Kubernetes

Security & Key Management

Tools

Azure DevOps

App Services

Functions

APIs

Containers

Azure Key Vault

Terraform

Bicep

ARM templates

PowerShell

Python

Azure Monitor

Azure Policy

AKS

Docker

Kubernetes

Job description

DevOps & Cloud Engineering

*This is a 9-month contract position.

*Hybrid – Local to Mechanicsville, VA only, please

Description:

The DevOps and Cloud Engineer supports ITD Tolling modernization by building secure, automated deployment processes and ensuring reliable delivery and updates of services. The role standardizes CI/CD, improves availability, and improves cost efficiency.

Responsibilities:

CI/CD Engineering & Release Automation

• Design, build, and maintain CI/CD pipelines in Azure DevOps (YAML and Classic) for microservices and APIs.
• Establish reusable pipeline templates, release standards, and guardrails for compliant, repeatable deployments.
• Implement secure secrets and key management using Azure Key Vault and managed identities in pipelines.
• Automate database deployment workflows (e.g., DACPAC/SQLCMD) and integrate migration steps into releases.
• Enable blue/green or automated rollback strategies to minimize downtime and risk.

Environment Consistency & Observability

• Standardize provisioning and configuration across Dev/QA/Prod environments; codify configuration baselines.
• Build monitoring dashboards and actionable alerts for pipeline and deployment health (App Insights, pipeline logs).
• Uphold DevOps best practices tailored to a compliant government environment.

Azure Resource Engineering & Governance

• Implement and maintain Azure services and governance standards (e.g., App Services, Function Apps, API Gateways/API Management, AKS) supporting Tolling workloads.
• Support identity and access management (e.g., Entra ID SSO and role assignments) following least-privilege principles.
• Ensure solutions are fault‑tolerant and highly available; coordinate change requests and rollback procedures.

Monitoring, Troubleshooting & Reliability

• Monitor Azure services and application workloads to ensure uptime and performance; perform diagnostic deep dives with Azure Monitor and Log Analytics.
• Triage production incidents, drive timely resolution, and document root cause findings; participate in operational cycles and maintenance readiness checks.

Compliance, Data Flows & Cost Awareness

• Consider PCI or comparable regulatory requirements when evaluating system behavior, logging, and integrations.
• Understand end-to-end data flows across tolling systems (e.g., roadway data, financial transactions, reporting) and support optimization of integrations.
• Contribute to cloud cost visibility and optimization recommendations; align operational choices with governance and budget goals.

Collaboration & Communication

• Partner with architects, developers, DBAs, and engineers to align deployments with secure network and identity configurations; communicate clearly with stakeholders.

Required Qualifications

• Hands-on experience with Azure DevOps CI/CD (YAML & Classic).
• Azure application deployment engineering (e.g., App Services, Functions, Containers, APIs).
• Secure secrets & key management (Azure Key Vault, RBAC, managed identities).
• SQL deployment automation integrated with CI/CD.
• Logging & observability (App Insights, pipeline logs, dashboards, alerts).
• Infrastructure as Code (Terraform, Bicep, or ARM templates).
• Scripting & automation (PowerShell and/or Python).
• Experience with Azure administration/engineering in production environments.

Desired Qualifications

• Experience designing CI/CD standards or DevOps frameworks for microservices.
• Containerization & orchestration (Docker, AKS); registry-integrated build and release pipelines.
• Governance & compliance automation (Azure Policy, RBAC standards, pipeline guardrails).
• Experience with PCI or similar compliance frameworks.
• Exposure to cloud cost analysis and optimization in an enterprise environment
• Azure certifications (e.g., AZ-104, AZ-305, AZ-400) preferred.

Required Skills/Knowledge/Experience:

• Azure DevOps CI/CD (YAML & Classic), Required 4 Years
• Azure App Services / Functions / APIs / Containers, Required 3 Years
• Secure Secrets & Key Management (Key Vault, RBAC, managed identities), Required 3 Years
• SQL Deployment Automation (DACPAC, SQLCMD, CI/CD-integrated DB migrations), Required 1 Year
• Environment Provisioning & Configuration (Dev/QA/Prod standardization), Required 3 Years
• Logging & Observability (App Insights, pipeline logs, dashboards, alerts), Required 3 Years
• Infrastructure as Code (Terraform/Bicep/ARM), Required 2 Years
• Identity & Access (Entra ID), least-privilege IAM, Required 1 Year
• AKS / Containerization (Docker, Kubernetes), Desired 1 year
• Governance & Compliance Automation (Azure Policy, RBAC, pipeline guardrails), Desired 1 year
• PCI or similar compliance frameworks, Required 1 year
• Cloud Cost Analysis & Optimization, Desired 1 year