DevOps Engineer

About the role

The DevOps Engineer will own the AWA platform’s deployment, infrastructure-as-code, CI/CD pipelines and operational reliability within the bank’s Azure environment in the UAE. You will ensure that every component—from AKS namespaces and KEDA autoscalers to ADLS Gen2 lifecycle policies and Azure Firewall allowlists—is deployed reproducibly and operated securely.

Key responsibilities

• Design, implement and maintain all Azure infrastructure as code using Terraform and Bicep, including AKS clusters, ADLS Gen2, Azure Firewall, private endpoints, Key Vault and Container Registry.
• Own end-to-end CI/CD pipelines in Azure DevOps (or GitHub Actions) for container image builds, Notary v2 signing, Terraform plan validation and automated deployments.
• Manage AKS operations: namespace isolation, network policies, pod disruption budgets, KEDA autoscaling based on Kafka lag, OPA Gatekeeper policies and workload identity bindings.
• Implement container governance: image signing, vulnerability scanning and approved‑image ConfigMap enforcement.
• Configure secret and certificate rotation in Azure Key Vault and audit access events.
• Set up monitoring and alerting with Azure Monitor, Log Analytics and KQL queries; maintain PagerDuty escalation paths.
• Collaborate on security posture by applying Azure Policy, Defender for Cloud recommendations and maintaining network topology documentation.
• Maintain disaster‑recovery procedures, test failover to UAE South replica and validate RTO/RPO targets.

Required profile

• 5+ years of DevOps/Platform Engineering experience, with at least 2 years delivering production‑grade IaC on Azure.
• Bachelor’s degree in Computer Science, Systems Engineering or equivalent; Azure Administrator Associate (AZ‑104) or DevOps Engineer Expert (AZ‑400) strongly preferred.
• Proven ability to work autonomously, ensure reproducible deployments and drive reliability in a complex cloud environment.

Required skills

• Azure (AKS, VNet, Private Endpoints, NSGs, ExpressRoute, Firewall, Key Vault, ACR, ADLS Gen2)
• Infrastructure as Code: Terraform, Bicep
• Kubernetes ecosystem: AKS, Helm, Kustomize, KEDA, OPA Gatekeeper
• CI/CD: Azure DevOps, GitHub Actions, Notary v2 image signing
• Monitoring: Azure Monitor, Log Analytics, KQL
• Containerization: Docker, Azure Container Registry
• Security tooling: Defender for Cloud, Sentinel
• Event streaming: Kafka, Azure Event Hubs