SENIOR DEVOPS ENGINEER
North East Medical Services3 days ago
Daly City, CA, USASenior
Base Salary
$156k - $180k/yr
Responsibilities
- Design and maintain Azure landing zones, management groups, subscriptions, resource groups, policies, budgets, and centralized logging.
- Develop reusable Infrastructure as Code modules with Terraform and/or Bicep for Azure networking, security, compute, storage, monitoring, identity, and shared services.
- Build and operate infrastructure deployment pipelines in Azure DevOps and/or GitHub Actions across development, test, disaster recovery, and production environments.
- Design and troubleshoot Azure networking and hybrid connectivity, including virtual networks, routing, firewalls, private endpoints, ExpressRoute, VPN, BGP, and Azure Virtual WAN.
- Implement Azure Policy, RBAC, managed identities, service principals, privileged access controls, secrets management, compliance checks, and least-privilege deployment patterns.
- Configure Azure Monitor, Log Analytics, Network Watcher, alerts, dashboards, diagnostic settings, and activity-log retention.
- Support Azure migration, modernization, availability, backup, disaster recovery, regional resilience, failover testing, and post-migration stabilization.
- Automate operational tasks using PowerShell, Azure CLI, Python, REST APIs, and configuration-management tools.
- Maintain architecture diagrams, infrastructure documentation, operating procedures, troubleshooting guides, configuration records, and recovery runbooks.
- Participate in incident response, problem management, root cause analysis, change management, rotating on-call support, vendor coordination, and technical mentoring.
Requirements
- Bachelor’s degree in Computer Science, IT, Network Engineering, a related STEM field, or equivalent experience.
- At least 5 years of enterprise infrastructure or network engineering experience involving routing, firewalls, segmentation, DNS, VPN, and hybrid connectivity.
- At least 3 years of hands-on Microsoft Azure infrastructure engineering experience in production environments.
- Demonstrated experience provisioning Azure infrastructure with Terraform and/or Bicep, including reusable modules, remote state, variables, outputs, and environment promotion.
- Experience building infrastructure deployment pipelines with Azure DevOps and/or GitHub Actions, including approvals, security checks, and controlled production releases.
- Hands-on experience with Azure Virtual Network, network security groups, route tables, Azure Firewall, VPN Gateway, ExpressRoute, Private Link, Private DNS, load balancers, and network troubleshooting.
- Working knowledge of Microsoft Entra ID, Azure RBAC, managed identities, service principals, Key Vault, Azure Policy, and privileged access concepts.
- Experience supporting highly available, regulated, or mission-critical environments.
- Strong troubleshooting, documentation, communication, cross-team collaboration, governance, auditability, and infrastructure-as-code skills.
- English reading, writing, and speaking ability is required; Cantonese or Mandarin ability is an asset.
Benefits
- Full-time position with competitive benefits.
- Free medical, dental, and vision insurance for employees, spouses, and/or children.
- Company contribution to a 401(k).