Senior DevOps / Platform Engineer (Azure)
Virtasant Inc.8 hours ago
Remote, United StatesSenior
Responsibilities
- Design, build, and operate production Azure infrastructure including subscriptions, landing zones, private networking, managed identities, Key Vault, and Azure Monitor.
- Develop reusable Terraform or Bicep infrastructure modules and automated provisioning processes.
- Build secure, repeatable, isolated customer deployments with separate subscriptions, networks, encryption keys, and data stores.
- Implement Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time access, break-glass procedures, and secure secrets management.
- Design secure CI/CD pipelines with controlled runners, automated testing, security scanning, approval workflows, and production release controls.
- Implement cloud security controls and support penetration testing, vulnerability remediation, compliance reviews, and enterprise security assessments.
- Build centralized logging, metrics, distributed tracing, alerting, and SIEM integrations across customer deployments.
- Design backup, zone-redundancy, secondary-region failover, disaster recovery, RTO/RPO, and resilience capabilities.
- Conduct disaster recovery and performance testing and document results and remediation actions.
- Collaborate with application engineers, security teams, enterprise architects, and client stakeholders on operational, security, and performance requirements.
- Create operational runbooks, infrastructure documentation, and incident response procedures; participate in on-call support and post-deployment hypercare.
- For the Platform Lead opening, guide technical architecture, establish platform engineering standards, coordinate engineering activities, and represent the team in client architecture and security discussions.
Requirements
- Senior hands-on experience designing, building, and operating production Azure environments end to end.
- Strong infrastructure-as-code experience with Terraform or Bicep, including reusable modules, automated provisioning, configuration management, and lifecycle ownership.
- Experience building production platforms handling PHI or similarly sensitive data and supporting HIPAA, SOC 2, or comparable enterprise security reviews.
- Experience with penetration testing, security findings remediation, and producing technical evidence for compliance assessments.
- Strong experience with Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time and break-glass access, credential rotation, and secure secrets management.
- Experience designing and operating customer-isolated, multi-tenant environments with separate networking, encryption keys, and data stores.
- Experience building secure enterprise deployment pipelines with runners, environment promotion, approval workflows, container and dependency scanning, and coordinated releases.
- Hands-on experience with backup strategies, zone-redundant infrastructure, secondary-region recovery environments, documented RTO/RPO objectives, and production disaster recovery or failover testing.
- Strong observability and production operations experience covering logging, metrics, tracing, alerting, security event monitoring, performance testing, troubleshooting, and on-call support.
- Ability to independently own complex infrastructure initiatives, explain architectural decisions, and document operational procedures and technical trade-offs.
- Fluent written and spoken English with comfort collaborating with US-based engineers, architects, security teams, and client stakeholders.
- Must be based in the United States, authorized to work in the US, available around December 1, 2026, and able to travel domestically occasionally if required.
- For the Platform Lead opening, previous experience leading a small platform engineering team, establishing technical standards, owning architectural decisions, and representing infrastructure designs in enterprise client discussions is required.
- Preferred experience includes healthcare technology, Snowflake administration, Neo4j operations, Azure AI Foundry or Azure OpenAI, Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Kubernetes Service, Azure Container Apps, and AI-assisted development tools.
Benefits
- Remote contract role for candidates located in the United States with US work authorization.
- Multi-month engagement with potential extension.
- Start date is around December 1, 2026.
- Two openings are available, including one Platform Lead position.
- Occasional domestic travel may be required.
- Recruitment process includes a 30-minute recruiter interview, 30-minute technical interview, and 45-minute client interview.
About Virtasant Inc.
Virtasant provides cloud and software engineering services to enterprises, focusing on cloud migration and modernization, cost optimization, and AI-enabled transformation. The privately held, fully remote company also develops Helias, a cloud cost optimization platform used to understand, govern, and reduce spend at scale. Founded in 2007 and headquartered in Austin, Texas, it serves global customers across AWS, Azure, and Google Cloud.