Hybrid Senior Azure Engineer – SRE/DevOps

at Minor Hotels Europe and Americas

• Job title: Senior Azure Engineer – SRE/DevOps
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Azure, DNS, Firewalls, Grafana, Linux, Node.js, Prometheus, Python, Redis, SQL, Terraform, Vault
• Location requirements: Hybrid, Waukegan, United States

About the role

• Senior Azure Engineer at Capgemini responsible for building, operating, and optimizing cloud-native platforms. Collaborating with teams to ensure reliability, performance, and security for critical workloads.

Responsibilities

• Design, build, and maintain Azure landing zones and platform services (e.g., VNet, Private Endpoints, Key Vault, Azure Firewall/NSGs, Application Gateway/WAF)
• Implement Infrastructure as Code (IaC) with Terraform and/or Bicep; enforce GitOps workflows (branching, PRs, policy checks)
• Create reusable modules, pipelines, and golden patterns for app teams; champion automation-first approaches
• Define and measure SLIs/SLOs, error budgets, and reliability roadmaps for critical services
• Implement and tune observability (logs, metrics, traces) using Azure Monitor, Log Analytics, Application Insights, and Prometheus/Grafana where applicable
• Conduct capacity planning, resiliency testing (chaos, failover, DR), and performance tuning across services
• Build secure, robust CI/CD pipelines (GitHub Actions / Azure DevOps Pipelines) with automated testing, scans, and approvals
• Standardize deployment strategies (blue/green, canary, rolling) for containerized and PaaS workloads
• Manage container platforms (AKS: node pools, cluster autoscaling, HPA/VPA, ingress, network policies) and registries (ACR)
• Implement guardrails using Azure Policy, RBAC, PIM, and Blueprints (or equivalent) to enforce least privilege and compliance (e.g., SOC 2, ISO 27001, HIPAA as relevant)
• Manage secrets and certificates (Key Vault) and integrate security testing (SAST/DAST/Container scanning) into pipelines
• Support vulnerability remediation and patching SLAs
• Own incident response, including rotational shifts and on-call; lead triage, root cause analysis (RCA), and post-incident reviews
• Optimize cost (FinOps), tagging standards, budgets, and proactive spending alerts
• Maintain runbooks, knowledge base articles, and automation for routine operations
• Act as a technical mentor; review designs/PRs; contribute to architecture decisions
• Partner with app teams to onboard workloads, define nonfunctional requirements, and drive platform adoption

Requirements

• 7 years of hands-on experience with Azure-based infrastructure and services in production
• Deep expertise in several of: AKS, App Services, Functions, APIM, Azure SQL/MI, Cosmos DB, Storage, Event Hub/Service Bus, Redis, VNet/Peering, Private Link, Application Gateway/WAF, Front Door
• Strong IaC with Terraform (preferred) and/or Bicep; Git-based workflows; GitHub or Azure DevOps
• Proven SRE background: SLI/SLO design, error budgets, incident management, RCA, capacity and performance engineering
• CI/CD design and operations (GitHub Actions / Azure DevOps Pipelines); artifact/versioning strategies; release governance
• Observability with Azure: Monitor, Log Analytics, Application Insights, and alerting/automations (Action Groups, Logic Apps, Functions)
• Solid networking fundamentals (DNS, TLS, routing, firewalls, load balancing), identity (AAD/Entra ID), and secrets management (Key Vault)
• Scripting proficiency in PowerShell and/or Python; Linux fundamentals
• Understanding of security best practices: RBAC, PIM, Azure Policy, managed identities

Benefits

• Health insurance
• Retirement plans
• Paid time off
• Flexible work arrangements
• Professional development