Azure DevOps Kubernetes Engineer

 Job Description

Job Summary

We are seeking an experienced Azure DevOps Kubernetes Engineer with deep

expertise in cloud infrastructure, continuous integration/continuous delivery (CI/CD), and

containerization technologies. Specializes in managing Kubernetes-based

environments, leveraging automation tools to streamline workflows, and optimizing the

deployment of applications in cloud platforms such as Azure, AWS and GCP. Proven

ability to drive scalability, reliability, and security across all stages of the development

lifecycle, while ensuring high availability and performance of applications.

Core Competencies:

 DevOps & Cloud Infrastructure:

o CI/CD Pipeline Implementation: Design and implement automated

CI/CD pipelines using tools like Jenkins, GitLab CI, CircleCI, Azure

DevOps, and GitHub Actions to enable continuous integration,

automated testing, and continuous delivery of applications.

o Infrastructure Automation: Expertise in automating infrastructure

provisioning and management using Terraform, Ansible,

CloudFormation, and Azure Resource Manager (ARM) templates.

o Cloud Platforms: Extensive experience with cloud providers such as

AWS, Azure, and GCP, including setting up resources, scaling

environments, and managing cost and performance.

o Version Control Systems: Proficient in using Git, GitHub, GitLab, and

Bitbucket for source code management and collaboration.

 Kubernetes & Containerization:

o Kubernetes (K8s): Expertise in managing and deploying containerized

applications using Kubernetes, ensuring scalability, security, and efficient

resource utilization. Experience with cluster setup, configuration,

monitoring, and troubleshooting.

o Containerization: Extensive experience with Docker for creating,

managing, and deploying containers, as well as orchestrating containers

in Kubernetes clusters.

o Helm: Using Helm for managing Kubernetes charts to streamline

application deployments and simplify Kubernetes configurations.

o Service Mesh: Familiar with service mesh technologies like Istio for

microservice communication, monitoring, and security in Kubernetes

environments.

 Cloud Networking & Security:

o Cloud Networking: Proficient in configuring and managing cloud

networks, VPCs, subnets, security groups, and network policies for secure

communication in multi-cloud and hybrid environments.

o Security: Implementing security best practices in cloud environments,

such as IAM policies, encryption, and secure container management.

Experienced in integrating Azure AD and AWS IAM for role-based access

control.

o Monitoring & Logging: Configuring Prometheus, Grafana, ELK Stack

(Elasticsearch, Logstash, Kibana), and cloud-native monitoring tools

like CloudWatch and Azure Monitor for application health, performance

metrics, and log management.

 Automation & Configuration Management:

o Automation Tools: Experience in automating tasks with Ansible, Chef,

Puppet, and SaltStack for configuration management and system

automation across environments.

o Scripting: Proficient in Bash, Python, and PowerShell scripting for

automating DevOps workflows, managing infrastructure, and

implementing custom solutions.

Technical Skills:

 Kubernetes & Containerization: Kubernetes (AKS, EKS, GKE), Helm, Docker,

Kustomize, Istio, Kubeadm

 CI/CD Tools: Jenkins, GitLab CI, CircleCI, Azure DevOps, GitHub Actions

 Cloud Platforms: AWS, Azure, GCP

 Infrastructure as Code (IaC): Terraform, Ansible, CloudFormation, ARM

Templates

 Version Control: Git, GitHub, GitLab, Bitbucket

 Monitoring & Logging: Prometheus, Grafana, ELK Stack, CloudWatch, Azure

Monitor, Fluentd

 Scripting & Automation: Bash, Python, PowerShell

 Security & Networking: IAM, RBAC, VPN, TLS/SSL, VPC, Security Groups,

Firewalls

Experience Highlights:

 Kubernetes Cluster Management: Managed and orchestrated multiple

Kubernetes clusters (on AWS EKS, Azure AKS, and GCP GKE) to deploy and

scale containerized applications in production, ensuring high availability and

efficient resource utilization.

 CI/CD Pipeline Development: Designed and implemented robust CI/CD

pipelines to automate code deployment using Jenkins and GitLab CI, integrating

automated testing, security checks, and deployment to Kubernetes clusters.

 Cloud Infrastructure Automation: Automated infrastructure provisioning with

Terraform and Ansible, reducing manual intervention and improving

environment consistency across different cloud providers.

 Monitoring & Incident Management: Set up Prometheus and Grafana for

monitoring Kubernetes environments, creating custom dashboards and alerts to

ensure system health and promptly respond to incidents.

 Security Best Practices: Configured RBAC in Kubernetes, implemented

security policies, and automated vulnerability scanning in Docker images and

Kubernetes workloads using tools like Aqua Security and Clair.

 Microservices Architecture: Worked with development teams to deploy

microservices in Kubernetes, ensuring smooth communication between

services using Istio service mesh and ensuring seamless traffic management

and security policies.

 Cost Optimization: Optimized cloud costs by setting up auto-scaling policies in

Kubernetes, right-sizing cloud resources, and leveraging cost management tools

like AWS Cost Explorer and Azure Cost Management.

Certifications:

 Certified Kubernetes Administrator (CKA)

 AWS Certified DevOps Engineer – Professional

 Microsoft Certified: Azure DevOps Engineer Expert

 Google Professional Cloud Architect

 Certified Jenkins Engineer

 HashiCorp Certified: Terraform Associate

Soft Skills:

 Excellent communication and interpersonal skills to interact with both technical and non-

technical stakeholders.

 Strong problem-solving and critical thinking abilities.

 Proactive mindset with the ability to anticipate and mitigate risks in complex

environments.

Preferred Qualifications:

 Experience working in hybrid cloud environments.

 Familiarity with Azure DevOps, CI/CD pipelines, and automation tools for

network provisioning and security compliance.