DevOps Engineer

Independence Pet Group is a pet health company offering insurance, education, and related services to support pet parents. The DevOps Engineer provisions and manages Azure cloud infrastructure, develops Terraform modules, builds CI/CD pipelines, and supports secure, governed, and cost-aware DevOps operations. The role also troubleshoots deployments, integrates networking and security controls, and supports monitoring, incident response, and production readiness.

Responsibilities:

• Provision Clarus workload-specific Azure resources - compute (VMs, AKS), storage, PaaS services (Container Apps, App Services, Azure Functions, Azure SQL, Cosmos DB), Key Vault, and managed identities per architecture-approved patterns
• Author and maintain Terraform IaC modules - resource provisioning, testing, peer review, versioning, and CI validation for reusable workload and platform components
• Build, maintain, and support CI/CD pipelines - Azure DevOps YAML pipelines, reusable templates, build and release stages, approvals, quality gates, and environment-specific deployment flows
• Troubleshoot pipeline and deployment issues - failed builds, blocked releases, service connection problems, agent pool issues, package or artifact failures, container image deployments, and rollback scenarios
• Manage secure deployment integrations - Azure service connections, federated credentials, managed-identity authentication, Key Vault-backed secrets, artifact feeds, container registries, and least-privilege access patterns
• Scaffold and manage workload landing-zone structures - subscriptions, resource groups, RBAC assignments, tagging, Azure Policy, and dev / stg / prd environment alignment within the Calandra Azure Landing Zone
• Integrate workload resources with shared network services - private endpoints, VNet integration, DNS registration, firewall rule requests, and connectivity validation for Clarus environments
• Maintain environment parity and operational readiness - governance guardrails, policy compliance, cost tagging, quota management, secure defaults, runbooks, and release support procedures
• Support DevSecOps controls - pipeline security checks, SAST integration, dependency scanning, infrastructure validation, branch policies, pull request checks, and audit-friendly deployment evidence
• Monitor resource health, cost, and compliance - contribute to observability dashboards, alerting baselines, incident troubleshooting, and cost optimization recommendations
• Ramp into Clarus DevOps workloads and existing Cloud and DevOps Engineering standards, module libraries, deployment patterns, and support processes
• Deliver or improve CI/CD pipelines for at least one Clarus workload, including reusable templates, validation gates, deployment automation, and documented support steps
• Deliver IaC updates for Clarus workload infrastructure - passing CI gates and peer review - checked into the shared repo with clear deployment guidance
• Establish a support runbook for common infrastructure and pipeline requests, including build failures, release issues, service connection problems, environment promotion, and rollback coordination

Requirements:

• 3-5 years in Cloud Engineering or DevOps engineering, with hands-on Azure infrastructure provisioning and operational support experience
• Proven Terraform skills - authoring, testing, reviewing, and maintaining modules in a team environment with CI validation
• Strong CI/CD pipeline experience - Azure DevOps, YAML pipeline authoring, reusable templates, approvals, quality gates, and release troubleshooting
• Working knowledge of Azure resource hierarchy (management groups, subscriptions, resource groups), Azure RBAC, Azure Policy, and tagging standards
• Hands-on experience with Azure PaaS and workload services: App Service, AKS, Container Apps, Azure Functions, Azure SQL, Cosmos DB, Storage, and Key Vault
• Experience with secure connectivity patterns - private endpoints, VNet integration, DNS, firewall dependencies, and PaaS workload validation
• Experience supporting deployment security - service connections, managed identities, service principals, Key Vault integration, branch policies, and least-privilege access
• Hands-on experience with monitoring and observability platforms including Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, Site24x7, or equivalent enterprise monitoring solutions
• Experience configuring alerts, dashboards, and service health monitoring for cloud infrastructure, applications, CI/CD pipelines, and platform services to support proactive operations
• Proven incident response and production support experience, including triage, root cause analysis, service restoration, and post-incident documentation in business-critical environments
• Ability to troubleshoot complex infrastructure and deployment issues across Azure resources, networking, identity services, container platforms, and CI/CD pipelines
• Clear written communication and the ability to work across application, platform, security, networking, vendor, and operations teams
• Experience supporting Azure DevOps platform capabilities - agent pools, variable groups, environments, approvals, artifacts, package feeds, release gates, and pipeline library management
• Familiarity with GitHub Advanced Security or similar DevSecOps tooling for SAST, dependency scanning, secret scanning, and pull request enforcement
• Familiarity with Azure Landing Zone / Calandra-style environment patterns (landing-zone accelerators, policy-as-code, subscription vending, and workload governance)
• Azure certifications: AZ-104 (Azure Administrator), AZ-204 (Azure Developer), AZ-400 (DevOps Engineer), or equivalent experience
• Experience with cloud cost management (Azure Cost Management, FinOps practices) in a multi-subscription environment