DevOps Engineer

Makai Labs, LLC.; United States; On-site; USD 130,000 - 200,000; Full time

Job summary

Makai Labs, LLC builds cloud platforms and automates client environments using Terraform and Azure. This senior role owns platform design, builds from a new subscription, and ensures ongoing operation and alignment across client environments.

You will work directly with client DevOps engineers, make arch calls, manage migrations, upgrades, and security, and continuously improve platform health while keeping complex topologies and pipelines in mind.

Qualifications

• Azure production experience required.
• Extensive Terraform on Azure with state management.
• Ability to size up unfamiliar Azure architectures and make safe calls.

Responsibilities

• Stand up new platforms from scratch: network, compute, data, and pipelines.
• Make architecture calls and manage in-place vs destroy-and-replace changes.
• Execute migrations with runbooks and rollback plans.
• Maintain platform health: upgrades, drift, security, and shared foundation integrity.
• Collaborate directly with the client's DevOps engineers.

Skills

Azure

Terraform on Azure

DevOps

RBAC

Networking

Tools

Azure DevOps

GitHub

Postgres

Blob storage

Redis

Job description

Makai uses best-in-class AI and data to solve real-world operational and strategic challenges at scale. We help businesses with enterprise automation, human-machine teaming, product design and development, and market intelligence. Until now, people have had to learn and adapt to software. Makai creates solutions that adapt to people because technology will never be 100% accurate. People are essential for all of our human-machine teaming solutions.

About the role

We build and run cloud platforms for our clients. A lot of the time that means standing up a reusable Terraform foundation and adapting it for each client and environment. You'd own these platforms: design them, build them from an empty subscription, keep them running, and act as the person who actually knows how the whole thing fits together.

This is a senior role with a lot of trust attached. The clients differ, the topologies differ, the pipelines differ. What stays constant is Azure and the expectation that you can size up an unfamiliar setup, make the right calls, and own the result.

The ideal candidate will be able to

• Stand up new platforms from scratch: network, compute, data, and the pipeline to ship to them.
• Make the architecture calls and live with them. That includes knowing when a Terraform change is a safe in-place update and when it's a destroy-and-replace you should never run blind against production.
• Run migrations that carry real risk. Move a live platform onto a new foundation, read the plan correctly, write the runbook, and have a rollback ready before you start.
• Keep platforms healthy over time: provider upgrades, drift, security, and not letting a shared foundation rot as more clients land on it.
• Work directly with the client's own DevOps engineers. Often they're the ones running the apply and you're advising, so you need to explain a plan, unblock a failure quickly, and be someone the engineer holding the keys trusts.

Qualifications

Azure experience is the hard requirement. You've built and run production Azure yourself, not just used modules someone else wrote. Specifically:

• Azure networking is where most of the work lives: VNets and subnets, private endpoints and private DNS zones, NSGs and UDRs, NAT, Application Gateway and WAF, load balancers, and hub-and-spoke / Virtual WAN.
• Terraform on Azure, with state treated as something you respect: workspaces, migrations, imports, remote backends, and the discipline not to force an apply through a lifecycle guard.
• The delivery path: Azure Container Registry, VM Scale Sets and cloud-init, and CI/CD with Azure DevOps or GitHub.
• Azure data services: Postgres Flexible Server, managed Redis, Blob storage, and a real sense of their sizing, failover, and cutover risks.
• Entra ID and RBAC: app registrations, service principals, role assignments scoped properly across subscriptions.
• Clear writing and a level head on a live call. You can hand someone a runbook they can follow without you in the room.
• Candidates must be authorized to work in the US. No visa sponsorship is available for this position.

Nice-to-haves

• Temporal or similar workflow runtimes, and scripting (Bash, Python) for the glue.
• Past consulting or client-embedded work. You've been the outside expert before.

How we work

Small senior teams, real ownership. We'd rather have one engineer who understands a platform top to bottom than several who each own a slice.

Core values for Makai employees

• Be a flexible, innovative and creative thinker
• Be congenial and a team player
• Be self-sufficient
• Be self-driven with an ownership mentality