DevOps Engineer | Live Entertainment Company

Accountabilities

• Build and maintain cloud infrastructure: Design, provision, and manage Microsoft Azure resources using Terraform, applying modular infrastructure-as-code practices and maintaining consistency across multiple environments.

• Manage Azure networking: Implement and operate secure hub-and-spoke network architectures, including virtual network peering, subnet design, IP address planning, and private connectivity between services.

• Operate Kubernetes platforms: Provision, maintain, and optimize Azure Kubernetes Service (AKS) clusters and production container workloads, including node pools, autoscaling, ingress controllers, and cluster upgrades.

• Develop CI/CD pipelines: Build and maintain automated delivery workflows using GitHub Actions and/or Azure DevOps Pipelines to build container images, execute tests, publish artifacts, and deploy infrastructure and applications.

• Implement GitOps delivery: Support reliable, repeatable application deployments to Kubernetes through GitOps workflows and appropriate configuration management practices.

• Support application delivery: Help development teams build, containerize, deploy, and troubleshoot applications, particularly PHP and Node.js/React workloads, without requiring primary ownership of application development.

• Configure routing and edge security: Manage DNS, TLS certificates, ingress, and gateway or web application firewall configurations to ensure secure and reliable application access.

• Establish monitoring and observability: Implement centralized logging, metrics, dashboards, and proactive alerting using Azure Monitor, Log Analytics, Application Insights, and related tools.

• Strengthen cloud security: Establish and maintain identity and access controls, Managed Identities, Azure RBAC, secrets management, and security policies across infrastructure and application environments.

• Improve operational reliability: Investigate incidents, troubleshoot infrastructure and deployment issues, identify operational risks, and implement improvements that enhance platform stability and performance.

• Contribute to technical architecture: Participate in architectural discussions, review technical proposals, document design decisions, maintain operational runbooks, and help establish engineering best practices.

• Enable developer productivity: Support local development environments, Dockerfiles, Docker Compose configurations, and shared debugging workflows to make application development and deployment more efficient.

Requirements

• Professional experience: At least three years of experience in DevOps or platform engineering, including a minimum of two years supporting Microsoft Azure environments in production.

• Azure platform expertise: Strong understanding of Azure resource hierarchy, including Management Groups, Subscriptions, and Resource Groups, as well as resource naming and tagging conventions.

• Identity and access management: Hands-on experience with Microsoft Entra ID, Azure RBAC, Managed Identities, and secure access management.

• Core Azure services: Practical knowledge of Storage Accounts, Azure Key Vault, Azure Container Registry (ACR), and Log Analytics.

• Infrastructure as code: Strong Terraform skills, including modular code development, remote state management, multiple environments, and state locking.

• Scripting and operating systems: Working knowledge of Linux, Bash, PowerShell, and Git-based version control.

• Containerization: Experience building, optimizing, and troubleshooting Dockerfiles, along with managing local development environments using Docker Compose.

• Kubernetes and AKS: Production experience provisioning and operating AKS clusters, managing node pools and autoscaling, configuring ingress controllers, and performing cluster upgrades. Familiarity with Deployments, Services, ConfigMaps, Secrets, Helm charts, and troubleshooting with kubectl is essential.

• Cloud networking: Understanding of hub-and-spoke topologies, virtual network peering, subnet architecture, CIDR planning, Network Security Groups, and NAT Gateways.

• Private connectivity: Hands-on experience securing Azure platform services through Private Endpoints, Private Link, and Azure Private DNS Zones.

• Secure administrative access: Familiarity with Azure Bastion and VPN Gateway configurations, including Site-to-Site and Point-to-Site connectivity.

• CI/CD automation: Experience implementing deployment pipelines with GitHub Actions or Azure DevOps Pipelines, including container image builds, testing, artifact publishing, and Terraform execution.

• Monitoring and troubleshooting: Knowledge of Azure Monitor, Log Analytics, basic Kusto Query Language (KQL), Application Insights, and alert configuration.

• Application delivery knowledge: Familiarity with deploying PHP and Node.js/React applications is a strong advantage, particularly in containerized environments.

• English proficiency: Upper-intermediate English or higher, with the ability to communicate effectively in technical discussions and cross-functional collaboration.

• Problem-solving and ownership: A proactive, analytical approach to troubleshooting, risk identification, continuous improvement, and operational reliability.

• Collaboration and communication: Ability to work effectively with platform engineers, developers, and technical stakeholders, document solutions clearly, and contribute to architectural decisions.

The following skills and qualifications are considered advantageous:

• Advanced networking: Experience with Azure Firewall, User-Defined Routes, forced tunneling, Application Security Groups, and Azure DNS Private Resolver.

• Edge and traffic management: Familiarity with Azure Front Door, Application Gateway, Cloudflare services, content delivery networks, web application firewalls, Zero Trust, and the Cloudflare Terraform Provider.

• Advanced Kubernetes and GitOps: Knowledge of Argo CD, Flux, Workload Identity, OIDC federation, Azure CNI Overlay, Cilium, Kubernetes Network Policies, cert-manager, external-dns, and KEDA.

• Security and governance: Experience with Azure Policy, Microsoft Defender for Cloud, container vulnerability scanning tools such as Trivy, and infrastructure-as-code security tools such as TFLint and Checkov.

• Additional Azure services: Exposure to Azure Container Apps, App Service, Azure Functions, Azure Database for PostgreSQL or MySQL Flexible Server, Azure Managed Redis, and Service Bus.

• Cloud architecture: Familiarity with Azure Landing Zones, the Cloud Adoption Framework (CAF), Virtual WAN, and ExpressRoute.

• Relevant certifications: AZ-104, AZ-700, AZ-400, Certified Kubernetes Administrator (CKA), or HashiCorp Certified: Terraform Associate.

Benefits

• Full-time, long-term opportunity: A stable engagement focused on building and operating essential cloud infrastructure.

• European working hours: Work within European time zones to collaborate effectively with distributed teams.

• Immediate start: An opportunity to join the team as soon as possible.

• Technical ownership: Take responsibility for production Azure platforms, Kubernetes infrastructure, networking, security, and deployment automation.

• Complex engineering challenges: Work with modern cloud technologies and high-traffic digital platforms in a demanding, business-critical environment.

• Cross-functional collaboration: Partner with platform leadership and product development teams to improve infrastructure and application delivery.

• Professional development: Expand your expertise across Azure architecture, Kubernetes, Terraform, GitOps, cloud security, and observability.

• Meaningful operational impact: Help ensure reliable digital services that support live entertainment productions and ticketing experiences across multiple countries.