DevOps Engineer (AIOps) – API & Kubernetes

About the role

The DevOps Engineer owns the AWA platform’s deployment, infrastructure-as-code, CI/CD pipelines and operational reliability. You will ensure every component – from AKS namespaces and KEDA autoscalers to ADLS Gen2 lifecycle policies and Azure Firewall allowlists – is consistently deployed, automatically tested and reliably operated in the bank’s Azure environment in the UAE.

Key responsibilities

• Design, implement and maintain all Azure infrastructure for AWA using Terraform or Bicep, including AKS clusters, ADLS Gen2 accounts, Azure Firewall, private endpoints and ExpressRoute.
• Own end-to-end CI/CD pipelines in Azure DevOps (or GitHub Actions) for container image builds, Notary v2 signing, ACR pushes and AKS deployments, with automated policy checks and regression testing.
• Manage AKS operations: namespace isolation, network policies, pod disruption budgets, KEDA autoscaling based on Kafka lag, OPA Gatekeeper policies and workload-identity bindings.
• Govern container images in Azure Container Registry, enforce image signing, vulnerability scanning and maintain approved-image ConfigMaps.
• Configure Azure Monitor alerts and Log Analytics KQL queries for SLA breaches, error spikes, pod crashes and token budget violations, and maintain PagerDuty escalation paths.
• Collaborate with security engineers to apply Azure Policy, Defender for Cloud recommendations, firewall rule reviews and private endpoint configurations.
• Maintain and test disaster-recovery procedures for ADLS Gen2, Azure AI Foundry and AKS clusters, validating RTO/RPO targets.

Required profile

• 5+ years of DevOps or platform engineering experience, with at least 2 years delivering production-grade IaC on Azure using Terraform or Bicep.
• Strong background in Kubernetes (AKS), Azure networking and security services, and CI/CD automation.
• Hands‑on experience with monitoring, alerting and incident response in cloud environments.

Required skills

• Terraform / Bicep
• Azure DevOps or GitHub Actions
• AKS, Kubernetes namespaces, RBAC, Network Policies
• Helm, Kustomize
• KEDA autoscaling
• Docker, Azure Container Registry, Notary v2 image signing
• OPA Gatekeeper
• Azure Monitor, Log Analytics, KQL
• Azure Firewall, VNet, NSGs, Private endpoints, ExpressRoute
• Azure Key Vault, Workload Identity
• ADLS Gen2, WORM policies
• Azure AI Foundry, APIM
• Kafka / Azure Event Hubs monitoring
• Defender for Cloud, Sentinel