Senior DevOps Engineer

ThreePDS Inc; Dallas (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

ThreePDS Inc. in Dallas, TX is seeking a Senior DevOps Engineer to own CI/CD for .NET services on AKS, designing pipelines for trunk-based development and fast deployments in an on-site environment.

You will manage Azure DevOps Pipelines and GitHub Actions, automate release notes, implement security, IaC with Bicep/Terraform, and monitor with Azure Monitor and Grafana.

Qualifications

• 5+ years in DevOps or release engineering managing build and release systems.
• Hands-on expertise with Azure DevOps Pipelines and GitHub Actions (YAML, templates, workflows).
• Strong Azure expertise in AKS, Container Registry, Key Vault, and Entra ID/managed identity.
• Production Kubernetes experience including deployments and troubleshooting.
• IaC experience with Bicep, ARM, Terraform, plus Helm.
• Scripting in PowerShell/Bash/Python and secure CI/CD practices.
• Excellent written and verbal communication; able to document decisions and tradeoffs.
• Local to the Dallas-Fort Worth area and able to work in the Dallas office.

Responsibilities

• Own CI/CD pipeline design and improvement in Azure DevOps and GitHub Actions for .NET applications and services.
• Drive trunk-based development with short-lived branches, fast PR validation, and feature flags.
• Build progressive delivery patterns (blue/green, canary, ring-based AKS) with automated rollback on failed health gates.
• Define release standards for versioning, tagging, artifact promotion, and change tracking.
• Reduce build times and flaky tests; measure reliability with SLOs and dashboards.
• Manage Docker builds and Azure Container Registry lifecycles, secure base images, and multi-stage optimization.
• Maintain infrastructure as code with Bicep/Terraform, Helm charts, and Kustomize overlays.
• Embed supply-chain security into pipelines (SAST/DAST, SBOMs, signing, provenance).
• Manage secrets with Azure Key Vault, credentials, and OIDC federation; minimize long-lived credentials.
• Instrument releases with health signals and metrics using Azure Monitor, Application Insights, Prometheus, Grafana.
• Partner with developers to unblock delivery and coach engineering practices.
• Participate in on-call, blameless postmortems, and follow-through.

Skills

Communication

Documentation

Ownership

DevOps

Tools

AKS

Azure DevOps Pipelines

GitHub Actions

Container Registry

Helm

Terraform

Bicep

Kustomize

Job description

Senior DevOps Engineer

Dallas, TX | On-site | Local DFW candidates required

About the Role

We are looking for a Senior DevOps Engineer who lives and breathes build and release management. You'll own the path from commit to production for our .NET services on Azure Kubernetes Service (AKS), designing pipelines that make trunk-based development safe, fast, and reliable. This hands-on, in-office Dallas role partners directly with development teams.

Our release footprint spans Azure DevOps and GitHub Actions. You'll improve both ecosystems, consolidate where practical, and make frequent deployments routine.

What You'll Do

• Own CI/CD pipeline design, implementation, and improvement in Azure DevOps and GitHub Actions for .NET applications and services.
• Drive trunk-based development: short-lived branches, fast pull-request validation, feature flags, and continuous integration into main.
• Build progressive delivery patterns (blue/green, canary, and ring-based AKS rollouts) with automated rollback on failed health gates.
• Define release standards for versioning, tagging, artifact promotion, release notes automation, and change tracking.
• Reduce build times and flaky tests; measure reliability and developer feedback loops using SLOs.
• Manage Docker builds and Azure Container Registry image lifecycles, including secure base images, caching, and multi-stage optimization.
• Maintain infrastructure as code with Bicep and/or Terraform, Helm charts, and Kustomize overlays to ensure reproducibility and visibility into drift.
• Embed supply-chain security into pipelines: SAST/DAST, dependency/container scans, SBOMs, artifact signing, provenance, and policy-as-code.
• Manage secrets and identity with Azure Key Vault, workload identity, and OIDC federation; eliminate long-lived pipeline credentials.
• Instrument releases with health signals, DORA metrics (lead time, deployment frequency, change failure rate, MTTR), and dashboards/alerts using Azure Monitor, Application Insights, Prometheus, or Grafana.
• Partner with developers to unblock delivery, review pipeline changes, and coach strong engineering practices.
• Participate in on-call response for platform and delivery systems, facilitate blameless postmortems, and drive follow-through.

Required Qualifications

• 5+ years in DevOps, platform, or release engineering, with significant ownership of build and release systems.
• Deep hands-on expertise with Azure DevOps Pipelines and GitHub Actions: YAML, templates, reusable workflows, self-hosted agents/runners, environments, and approvals.
• Strong Azure expertise in AKS, Container Registry, Key Vault, Entra ID/managed identity, networking, and resource governance.
• Production Kubernetes experience with deployments, services, ingress, autoscaling, resource tuning, and incident troubleshooting.
• Knowledge of .NET build and packaging: MSBuild, dotnet CLI, NuGet feeds/versioning, and multi-service solution builds.
• Proven implementation of trunk-based development, branching policies, merge queues, feature flags, and keeping main releasable.
• Infrastructure as code using Bicep, ARM, or Terraform, plus Helm.
• Scripting and tooling with PowerShell, Bash, and/or Python.
• Working knowledge of software supply-chain security and secure CI/CD secret handling.
• Strong written and verbal communication; ability to document decisions and explain engineering tradeoffs.
• Must be local to the Dallas-Fort Worth area and able to work in the Dallas office.

Preferred Qualifications

• Experience migrating between or operating Azure DevOps and GitHub at scale.
• GitOps with Argo CD or Flux; service mesh (Istio/Linkerd) or advanced AKS networking.
• Policy-as-code with OPA/Gatekeeper or Azure Policy.
• Experience with SOC 2, PCI, HIPAA, or similarly regulated/audited environments.
• Database deployment automation with EF Core migrations, DACPAC, Flyway, or Liquibase.
• Performance/load testing embedded in pipelines.
• Azure AZ-400 or AZ-104, or Kubernetes CKA/CKAD certifications.

How We Work

Trunk-based development, small batches, frequent deployments. We value automation over manual process, measurable improvements, and shared ownership over handoffs.