The Senior DevOps Engineer will lead the Azure infrastructure and delivery pipelines supporting software used across 150+ airports worldwide.

This role is responsible for managing cloud migrations across tenants and subscriptions, modernizing legacy .NET and Windows workloads into current Azure services, and building and maintaining the CI/CD pipelines our engineering teams rely on every day.

The position serves as a senior technical resource for how we build, deploy, secure, and operate our platform. This individual will work closely with engineers, architects, and leadership to support infrastructure decisions through implementation and production, helping ensure our systems remain scalable, secure, and reliable.

This is a hands-on role with broad visibility and the opportunity to make a direct impact across our technology environment.

 

Key Responsibilities

Cloud Infrastructure & Platform Management

• Design, build, and manage Azure infrastructure including App Services, VNets, DNS, Private Endpoints, Key Vault, and Storage supporting production airport operations

• Manage and optimize Azure SQL and SQL Server VM environments, including backups, HA/DR planning, performance monitoring, and secure connectivity

• Administer Windows Server and IIS environments where legacy workloads remain and support migration to App Services, containers, or other managed solutions

• Build monitoring and observability across the platform using Azure Monitor, Log Analytics, and Application Insights to support data-driven operational decisions

 

DevOps Automation & Delivery

• Design, maintain, and improve CI/CD pipelines in Azure DevOps and GitHub Actions for .NET/C# applications, including build, testing, artifact management, and multi-environment deployments

• Establish and maintain Infrastructure as Code standards using Bicep, Terraform, or ARM templates

• Partner with application engineers on release strategy, branching, environment promotion, and production readiness

 

Security, Compliance & Governance

• Strengthen security through RBAC, network controls, secrets management, patching, and cost governance across multiple subscriptions and tenants

• Set the security bar for how we run in Azure: least-privilege RBAC, segmented networks, Private Endpoints, secrets in Key Vault, and managed identities instead of static credentials.

• Oversee vulnerability management, including patch schedules, dependency and image scanning, and ensuring identified findings are properly addressed and resolved - not simply documented

• Build security into CI/CD pipelines through secret scanning, SAST/DAST, signed artifacts, and policy-based controls to prevent high-risk or unauthorized changes from reaching production

• Lead SOC 2 compliance efforts and customer security reviews by maintaining documentation, keeping evidence current, managing technical controls, and reducing administrative burden on the engineering team

 

Technical Leadership & Operational Excellence

• Serve as a senior technical resource for infrastructure decisions, while supporting documentation, mentoring, and operational best practices

• Identify opportunities to improve system reliability, security, performance, and operational efficiency, and lead those improvements through implementation

 

Required Qualifications

• 6+ years of experience in DevOps, SRE, or Cloud Engineering roles, with at least 3 years focused on Microsoft Azure

• Proven ownership of production CI/CD pipelines in Azure DevOps or GitHub Actions, including designing pipelines from the ground up rather than only maintaining existing templates

• Strong hands-on experience deploying and supporting .NET / C# applications across development, test, and production environments

• Strong knowledge of Azure networking including VNets, NSGs, Private Endpoints, DNS (public and private), and VPN/ExpressRoute fundamentals

• Production experience with SQL Server and Azure SQL, including deployment, performance tuning, backup and recovery, and secure access practices

• Proficiency with at least one IaC tool (Bicep, Terraform, or ARM) used in production environments

• Strong scripting skills in PowerShell and Bash, with a focus on automating repetitive operational tasks

• Strong troubleshooting skills across infrastructure, networking, Windows Server, IIS, application, and database layers

• Working knowledge of Azure security fundamentals including Entra ID, RBAC, network security, encryption in transit and at rest, and how secrets are stored and rotated

• Experience building CI/CD pipelines that securely manage secrets, control deployment access, protect artifact integrity, and maintain clear environment separation

• Familiarity with security frameworks such as CIS, NIST, OWASP Top 10, or Microsoft Cloud Security Benchmark, with practical experience applying those standards in production environments

 

​​

Ready to join us? CLICK HERE TO APPLY