Senior Azure Platform / DevOps Engineer

**Senior Azure Platform / DevOps Engineer** **About Makai** Makai uses best-in-class AI and data to solve real-world operational and strategic challenges at scale. We help businesses with enterprise automation, human-machine teaming, product design and development, and market intelligence. Until now, people have had to learn and adapt to software. Makai creates solutions that adapt to people because technology will never be 100% accurate. People are essential for all of our human-machine teaming solutions. **About the role** At Makai, we build and run cloud platforms for clients in healthcare and other high-stakes industries. You take a platform from an empty Azure subscription to production, make the architecture calls and live with them, and own the infrastructure as code, the pipelines and the monitoring. Much of this runs inside our clients’ own Azure environments, so you work with their infrastructure teams daily: reviewing their designs, explaining what we need and why, and keeping work moving when it depends on them. **The ideal candidate will be able to** - Design, build and maintain Azure environments with Terraform across multiple subscriptions, from networking and identity to a running application - Build and maintain CI/CD for applications and infrastructure in Azure DevOps, GitHub Actions and similar platforms: release promotion with approvals, secure deployment identities and repository synchronization - Operate the compute and runtime platforms, from virtual machines to containers and PaaS: base images, upgrades, patching, rolling deployments, autoscaling and capacity planning - Design and tune monitoring, logging and alerting with Azure Monitor, Log Analytics and Application Insights - Design and operate the identity and access model: Entra ID, SSO, workload identities, role- and attribute-based access control, privileged and just-in-time access, and secrets in Key Vault - Design and maintain secure network architectures: hub-and-spoke and Virtual WAN, private endpoints and DNS, Application Gateway and WAF, Azure Firewall, NSGs and isolation between environments - Maintain security and compliance: vulnerability remediation, patching, Azure Policy, and audits against client policies and regulatory frameworks - Design and run backup, high availability and disaster recovery: recovery objectives, zone and region redundancy, restore testing, DR drills and failover - Own production changes and incidents: formal change management with verification and rollback, and troubleshooting through to root cause - Act as the technical counterpart to clients’ infrastructure and security teams: design reviews, proposals, change requests and runbooks **Qualifications** - 5+ years of hands-on experience designing, building and operating production Azure environments - Expert-level Terraform: you have owned large multi-environment, multi-subscription Azure codebases, designed their code and state structure, and carried out major refactors and state migrations on live infrastructure - Proven experience designing CI/CD systems for both applications and infrastructure on Azure DevOps, GitHub Actions or comparable platforms, across many repositories and environments - Strong Linux systems administration background, with a deep understanding of how servers are provisioned, configured and run, and hands-on troubleshooting of services, containers, storage and networking at the OS level - Fluency in Bash and PowerShell; Python is a plus - Deep understanding of Microsoft Entra ID and of identity protocols such as OIDC, OAuth 2.0 and SAML, and of Azure’s control-plane and data-plane authorization models - Proven experience designing, implementing and testing high availability and disaster recovery for production systems, with a solid understanding of the SLAs and recovery limits of Azure services - Hands-on experience with Azure compute services such as Virtual Machines and VM Scale Sets, App Service and Container Apps - Experience building observability on Azure Monitor, Log Analytics and Application Insights, and fluency in KQL - Solid working knowledge of Azure networking, particularly hub-and-spoke topologies, private connectivity and DNS - Experience operating Azure data services such as Azure Database for PostgreSQL, Azure SQL Database, Azure Managed Redis, Cosmos DB and Azure Storage - Excellent technical writing and live communication: documentation others can act on without you, and a composed, precise manner on client calls and during incidents - Candidates must be authorized to work in the US. No visa sponsorship is available for this position. **How we work** Small senior teams, real ownership. We'd rather have one engineer who understands a platform top to bottom than several who each own a slice. **Core values for Makai employees** - Be a flexible, innovative and creative thinker - Be congenial and a team player - Be self-sufficient - Be self-driven with an ownership mentality - Have a strong work ethic