Cloud DevOps Engineer

About the role

Infinite Pl is seeking a Cloud DevOps Engineer to design and operate a secure Azure foundation that supports agentic AI products from sandbox experimentation to production deployment. The role combines Azure landing‑zone engineering, CI/CD, MLOps/LLMOps, infrastructure‑as‑code, observability, and release automation.

Key responsibilities

• Design, build and manage Azure landing zones, including management groups, subscriptions, policies, RBAC, networking, and security guardrails.
• Implement hub‑spoke networking, Private Link, firewalls, NSGs, Defender for Cloud, Azure Policy, and cost‑governance aligned with regulated cloud requirements.
• Create self‑service sandbox templates with auto‑expiry, policy controls, cost visibility and migration paths to staging and production.
• Develop CI/CD pipelines for applications, agents, IaC and environments using Azure DevOps or GitHub Actions.
• Automate environment promotion with gate hooks, approvals, rollback, versioning and auditability.
• Manage container build and registry workflows (ACR, AKS, Azure Container Apps), secrets integration with Key Vault and secure supply‑chain practices.
• Set up observability and telemetry using OpenTelemetry, Azure Monitor and Log Analytics, and build operational dashboards.
• Collaborate with governance, platform and engineering teams to enforce controls without hindering safe experimentation.

Required profile

• Hands‑on experience with Azure cloud engineering, landing zones, Cloud Adoption Framework, subscriptions, RBAC, networking, Private Link, Azure Policy and Defender for Cloud.
• Strong IaC expertise with Bicep and/or Terraform, disciplined source control and environment management.
• Proficiency in Azure DevOps or GitHub Actions, CI/CD pipeline design, deployment automation and rollback planning.
• Experience with containers, Azure Container Registry, AKS or Azure Container Apps, Key Vault and secure deployment patterns.
• Understanding of MLOps/LLMOps or agent‑ops concepts, including artifact/version registries and deployment gates.
• Ability to work in regulated or security‑focused environments where residency, auditability, cost control and reliability are critical.

Required skills

• Microsoft Azure
• Azure landing zones & Cloud Adoption Framework
• Bicep
• Terraform
• Azure DevOps
• GitHub Actions
• CI/CD pipeline design
• Containers (Docker)
• Azure Container Registry (ACR)
• Azure Kubernetes Service (AKS) or Azure Container Apps
• Key Vault
• OpenTelemetry
• Azure Monitor & Log Analytics
• Hub‑spoke networking, Private Link, NSGs, firewalls
• Defender for Cloud & Azure Policy