DevOps Engineer

Role Overview The DevOps Engineer manages the CI/CD pipelines, deployment processes, and cloud infrastructure across all four T&D product streams (uPlan, uKnow, uLakehouse, uLakehouseStudio). A significant part of the role in the initial period will be supporting the remediation agenda identified in the pipeline review — improving IaC coverage, deployment consistency, and security posture — under direction from the SDM/EA.

Key Responsibilities ·Manage and maintain CI/CD pipelines across all four Azure product streams using Azure DevOps, ensuring reliable and repeatable deployment processes ·Support the uPlan deployment model: multi-region pipeline execution, staging slot swaps, ACR container image releases, and Managed DevOps Pool operations ·Address the pipeline review remediation backlog under SDM/EA direction — including uKnow IaC source of truth consolidation, uLakehouse deployment fragmentation, and YAML template standardisation ·Assist with the critical uKnow finding: support secret rotation, removal of hard-coded credentials from source code, and migration to Key Vault references ·Move uLakehouse deployment execution away from temporary public firewall openings and toward the Managed DevOps Pool / private agent pattern used by uPlan ·Maintain Infrastructure as Code (Bicep) across all streams, enforcing naming, tagging, and configuration standards ·Monitor cloud infrastructure performance, costs, and health using Azure Monitor, Application Insights, and Log Analytics ·Support incident response for infrastructure and pipeline failures across all streams, including root cause analysis and post-incident documentation ·Contribute to UAT test execution for infrastructure changes including DR failover plans and load testing ·Maintain deployment documentation including environment diagrams, runbooks, and Managed DevOps Pool configuration guides in Azure DevOps Wiki

Key Skills & Experience Required ·Hands-on experience with Azure DevOps — multi-stage YAML pipeline authoring, environment approvals, service connections, and variable groups ·Proficiency with Bicep / Infrastructure as Code — able to read, write, and validate Bicep templates across complex Azure environments ·Familiarity with the Urbis product stack: Azure App Service, Container Apps, Cosmos DB, Service Bus, Synapse, Blob Storage, Front Door, Key Vault ·Experience with Azure Key Vault and managed identity patterns for secure secrets management ·Understanding of private networking in Azure: private endpoints, private DNS, VNet integration, and Managed DevOps Pools ·Python and/or PowerShell scripting for deployment automation and operational tasks ·Working knowledge of Azure Monitor, Log Analytics, and Application Insights ·Associate-level Azure certification desirable (AZ-104 or AZ-204) ·Solid documentation habits and structured approach to change management — runbooks and operational guides expected as deliverables