Emplois en direct

Role Overview

Key Responsibilities

• Infrastructure as code: Own and maintain all Azure infrastructure in Terraform/Bicep: AKS cluster configuration, ADLS Gen2 with WORM policies, APIM configurations, Azure Firewall allowlists, private endpoints, Key Vault, Container Registry, and ExpressRoute peering.
• CI/CD pipeline ownership: Design and maintain Azure DevOps pipelines for all platform components — container image build, ACR push, Notary v2 signing, AKS deployment, Terraform plan, policy checks, and Agent Regression Testing gates.
• AKS operations: Manage multi-namespace AKS cluster — Network Policies, Pod Disruption Budgets, KEDA autoscaling, OPA Gatekeeper admission policies, and Workload Identity bindings for all agent pods.
• Container governance: Manage ACR, enforce Notary v2 image signing, configure vulnerability scanning, and maintain approved-image ConfigMaps.
• Secret and certificate management: Own Azure Key Vault configuration — access policies, automatic TLS and secret rotation schedules, and audit of all secret access events.
• Monitoring and alerting: Configure Azure Monitor alert rules and Log Analytics KQL queries for SLA breaches, error rate spikes, pod crash loops, token budget breaches, and Kafka consumer lag; maintain on-call escalation paths.
• Security posture: Implement Azure Policy assignments, Defender for Cloud recommendations, Firewall rule reviews, and Private Endpoint configurations; maintain network topology documentation.
• Disaster recovery: Maintain and test DR procedures including failover configurations, endpoint routing, cluster recovery, and RTO/RPO validation.

Required Skills & Qualifications

• 5+ years in DevOps or Platform Engineering; 2+ years on Azure in a production environment.
• Terraform or Bicep — production IaC at scale, not just templates.
• Kubernetes / AKS: namespaces, RBAC, Network Policies, Helm charts, Kustomize.
• Azure DevOps or GitHub Actions — multi-stage pipelines, approvals, environments.
• Azure Monitor, Log Analytics, and KQL query language.
• Container ecosystem: Docker, ACR, image signing, and admission control.
• Azure networking: VNet, private endpoints, NSGs, Azure Firewall, ExpressRoute concepts.
• KEDA (Kubernetes Event-Driven Autoscaling) or equivalent autoscaling experience.
• Bachelor's degree in Computer Science, Systems Engineering, or equivalent.

Preferred Attributes

• Azure Key Vault, managed identity, and Workload Identity for Kubernetes.
• OPA Gatekeeper or Kyverno for Kubernetes policy enforcement.
• Kafka / Azure Event Hubs — consumer group management and lag monitoring.
• ADLS Gen2, WORM immutable storage, and lifecycle management policies.
• Azure AI Foundry / APIM — token quotas, rate limiting, and backend routing configuration.
• Security tooling: Defender for Cloud, Sentinel, and Notary v2.
• Azure Administrator Associate (AZ-104) or DevOps Engineer Expert (AZ-400).
• Certified Kubernetes Administrator (CKA).

Halian Group: With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers. Our resourcing and smart services help you to realise tomorrow's potential. Discover the amazing things possible when you bring the right people and the right technologies together. At Halian, we recognise that diversity, equity, and inclusion (DEI) are essential to building high-performing teams for our clients. We are committed to connecting organisations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives. We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique. #LI-CC1