Senior IT & Azure DevOps Engineer

Role: Senior IT & Azure DevOps Engineer
Location: Woburn, MA – 100% Onsite (5 Days/Week)
Interview: Onsite Interview Required

Position Summary

We are seeking a hands-on Senior IT & Azure DevOps Engineer / AI Platform Engineer to build, automate, secure, and operate enterprise Azure platforms supporting Generative AI, cloud-native applications, data services, and Microsoft Fabric/OneLake workloads.

This is a platform engineering role focused on Infrastructure as Code (IaC), CI/CD automation, DevSecOps controls, cloud networking, identity, observability, governance, and production readiness across Development, Test, and Production environments.

Key Responsibilities

• Engineer Azure landing-zone components, including subscriptions, resource groups, VNets, subnets, NSGs, private endpoints, private DNS, routing, peering, firewall integration, identity boundaries, naming standards, tagging, and environment isolation.
• Build and maintain Terraform-based Infrastructure as Code modules and Azure DevOps YAML pipelines for repeatable provisioning, automated validation, approvals, artifact promotion, release gates, rollback, and controlled deployments across multiple environments.
• Deploy and integrate Azure AI Foundry, Azure OpenAI, Azure AI Search, API Management, Key Vault, Storage, managed databases, Microsoft Fabric/OneLake, Purview, and Retrieval-Augmented Generation (RAG) patterns using secure private connectivity and governed access models.
• Implement DevSecOps controls, including least-privilege RBAC, Managed Identity, App Registrations, OAuth/OIDC, Key Vault secret management, secure pipeline variables, SAST, dependency scanning, IaC scanning, secret scanning, vulnerability gates, and production change controls.
• Operate platform observability and governance using Azure Monitor, Application Insights, Log Analytics, alerts, dashboards, Azure Policy, cost/quota monitoring, runbooks, architecture diagrams, operational documentation, and audit-ready evidence.

Required Experience

• 5+ years of experience in Cloud Engineering, DevOps, DevSecOps, SRE, or Platform Engineering.
• 3+ years of hands-on Azure delivery experience in production environments.
• Strong hands-on experience with Terraform, Azure DevOps, Git, YAML pipelines, Azure networking, Entra ID, Azure RBAC, Key Vault, private endpoints, Azure Monitor, and Log Analytics.
• Proven experience implementing secure multi-environment deployment practices.
• Demonstrated ability to troubleshoot complex cloud platform issues.
• Ability to collaborate across application, cybersecurity, network, data, architecture, and governance teams.
• Strong technical documentation skills supporting production operations.

Preferred Qualifications

• Experience with Azure AI Foundry, Azure OpenAI, Azure AI Search, and Retrieval-Augmented Generation (RAG).
• Experience with Microsoft Fabric, OneLake, Microsoft Purview, and API Management.
• Knowledge of AKS, Azure App Services, GitOps, Azure Policy, and Bicep.
• Proficiency in PowerShell, Python, and containerization technologies.
• Familiarity with enterprise AI governance and cloud security best practices.
• Experience in regulated industries such as banking, financial services, healthcare, or government.
• Microsoft certifications such as AZ-104, AZ-305, AZ-400, AZ-500, AI-102, or AI-900 are a plus.

Strong candidates should be able to explain how they would securely deploy a Generative AI or RAG workload through Development, Test, and Production environments, addressing:

• Network isolation and private connectivity
• Identity and access management
• Infrastructure as Code using Terraform
• CI/CD automation and controlled deployments
• Secrets management and DevSecOps controls
• Monitoring, observability, and governance
• Release gates, rollback, and operational support

The ideal candidate is a hands-on Azure DevOps / Platform Engineer with deep Terraform, CI/CD, networking, security, and production operations expertise.