gt-hq - DevOps Engineer | Live Entertainment Company

• Build and maintain Azure infrastructure as code using Terraform. • Build and operate hub-and-spoke networks with secure, private connectivity between services. • Run AKS clusters and containerized workloads in production. • Build and maintain CI/CD pipelines in GitHub Actions and Azure DevOps. • Deliver applications to Kubernetes using GitOps workflows. • Configure edge routing, ingress, and security: DNS, TLS certificates, and basic WAF/gateway setups. • Set up monitoring, centralized logging, and proactive alerting. • Implement identity and security baselines: Managed Identities, Azure RBAC, secrets management, and policies. • Collaborate on architectural discussions: review technical proposals, surface operational risks, and contribute to runbooks and design records. • Support development teams day to day: local development workflows, Dockerfiles, and debugging in shared environments. • ESSENTIAL KNOWLEDGE, SKILLS & EXPERIENCE: • 1. AZURE CORE & PLATFORM • 3+ years in DevOps or platform engineering, with at least 2 years supporting Azure in production. • Strong understanding of Azure resource hierarchy: Management Groups, Subscriptions, Resource Groups, and naming/tagging conventions. • Identity & access management: Microsoft Entra ID, Azure RBAC, and Managed Identities. • Hands-on experience with core resources: Storage Accounts (Blob/Files), Key Vault, Azure Container Registry (ACR), and Log Analytics. • 2. INFRASTRUCTURE AS CODE & AUTOMATION • Terraform: writing modular code, managing remote state, handling multiple environments, and understanding state locking. • Scripting & OS fundamentals: Linux, Bash, and PowerShell. • Version control with Git. • 3. CONTAINERS & KUBERNETES • Containers: building, optimizing, and debugging Dockerfiles; local setups using Docker Compose. • AKS in Production: cluster provisioning, node pools, autoscaling, ingress controllers, and upgrades. • Kubernetes Operations: core workload manifests (Deployments, Services, ConfigMaps, Secrets), Helm chart usage, and troubleshooting via kubectl. • 4. NETWORKING & PRIVATE CONNECTIVITY • Hub-and-spoke topology: VNet peering, subnet design, and IP address planning (CIDR). • Private access for PaaS: hands-on experience securing services via Private Endpoints, Private Link, and Azure Private DNS Zones. • Network boundaries: Network Security Groups (NSGs) and NAT Gateways. • Secure administrative access: Azure Bastion and VPN Gateway (Site-to-Site / Point-to-Site). • 5. CI/CD & OBSERVABILITY • Pipelines: hands-on delivery pipelines using either GitHub Actions or Azure DevOps Pipelines (building images, running tests, pushing artifacts, executing Terraform). • Observability: Azure Monitor, Log Analytics workspace queries (KQL basics), Application Insights, and alert configuration. • Professional working proficiency in English (Upper-Intermediate or above). • Advanced Networking & Traffic Routing: Azure Firewall, User-Defined Routes (UDRs / forced tunneling), Application Security Groups (ASGs), Azure DNS Private Resolver. • Edge & Delivery: Azure Front Door, Application Gateway, Cloudflare (DNS, CDN, WAF, Zero Trust, Cloudflare Terraform Provider). • Advanced Kubernetes & GitOps: Argo CD, Flux, Workload Identity / OIDC federation, Azure CNI Overlay, Cilium, Network Policies, cert-manager, external-dns, KEDA. • Security & Governance: Azure Policy, Microsoft Defender for Cloud, container vulnerability scanning (Trivy), static analysis (TFLint, Checkov). • Extended Azure Services: Azure Container Apps, App Service, Azure Functions, Azure Database for PostgreSQL/MySQL Flexible Server, Azure Managed Redis, Service Bus. • Landing Zones & Architecture: Azure Landing Zones (CAF), Virtual WAN, ExpressRoute. • Certifications: AZ-104, AZ-700, AZ-400, CKA, or HashiCorp Certified: Terraform Associate. • INTERVIEW STEPS: • 1. GT interview with Recruiter • 2. Technical interview with GT • 3. Cultural Fit & Experience interview with the Client • 4. Final interview with the Client