What success looks like in this role:
Responsibilities:
- Design, implement, and manage automated Infrastructure as Code (IaC) solutions leveraging Azure Bicep and Azure Verified Modules (AVM) to deploy, configure, and standardize enterprise landing zones and workload infrastructure.
- Provision, maintain, and automate core enterprise networking architectures, including Azure Virtual WAN (VWAN), Virtual Hubs (VHUB), VNets, Subnets, NSGs, Route Tables, and Private Endpoints/Private DNS Zones.
- Manage application traffic routing, SSL offloading, and secure entry points using Azure Application Gateway (App GW) / WAF.
- Support compute and storage lifecycles by automating the deployment and configuration of Azure Virtual Machines (VMs), Storage Accounts, and Azure Key Vault for secure secret/certificate management.
- Support containerized application workloads by implementing, configuring, and maintaining Azure Container Apps (ACA) and Azure Container Registry (ACR).
- Develop, maintain, and optimize robust Azure DevOps CI/CD pipelines (multi-stage YAML) to automate validation (Bicep linting, what-if analysis), testing, and deployment of both infrastructure and application workloads.
- Manage, curate, and contribute to internal module libraries using AVM standards, establishing best practices for parameterization, tagging, telemetry, and reusable cloud infrastructure components.
- Implement DevSecOps practices across deployment pipelines, integrating secret management, RBAC, Managed Identities, and security scanning into CI/CD workflows.
- Manage version control workflows, branching strategies, and release governance within Azure Repos / Git.
- Configure and maintain monitoring, alerting, and logging using Azure Monitor and Log Analytics across network, compute, and container workloads.
- Develop and enhance automation scripts using PowerShell, Azure CLI, or Bash to streamline operational tasks and recurring environment management workflows.
- Maintain comprehensive technical documentation, including network topology diagrams, pipeline configurations, Bicep/AVM module guides, and runbooks.
#LI-SN1
You will be successful in this role if you have:
- Minimum 5 years of hands-on experience as a DevOps Engineer, Cloud Engineer, or Infrastructure Automation Engineer.
- Deep hands-on expertise with Infrastructure as Code (IaC) using Azure Bicep, with demonstrated experience leveraging and implementing Azure Verified Modules (AVM).
- Strong, proven experience with core Microsoft Azure Services:
- Networking: Azure Virtual WAN (VWAN), Virtual Hub (VHUB), VNets, Subnets, Network Security Groups (NSGs), Route Tables, and Private Endpoints.
- Traffic & Security: Azure Application Gateway (App GW / WAF) and Azure Key Vault.
- Compute & Containers: Azure Container Apps (ACA), Azure Virtual Machines (VMs), and ACR.
- Storage: Azure Storage Accounts (Blob, File shares, Data Lake, Access tiers, and network access restrictions).
- Strong proficiency in designing and implementing Azure DevOps Pipelines (multi-stage YAML pipelines, service connections, environments, approvals, and deployment gates).
- Strong scripting and automation skills using PowerShell, Azure CLI, or Bash (Python is a plus).
- Solid understanding of cloud security fundamentals, including Azure RBAC, Entra ID (Azure AD), and Managed Identities.
- Hands-on experience with containerization fundamentals (Docker) and deploying microservices to Azure Container Apps.
- Experience with IaC validation and testing tools (Bicep linter, ARM what-if operations, PSRule).
- Experience with monitoring, diagnostics, and telemetry using Azure Monitor, Log Analytics, and Network Watcher.
- Excellent documentation, analytical troubleshooting, and communication skills.
- Relevant Azure certifications (e.g., AZ-104: Azure Administrator Associate, AZ-700: Azure Network Engineer Associate, or AZ-400: DevOps Engineer Expert) are an added advantage.
Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.
Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.
If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [email protected]. US job seekers can find more information about Unisys’ EEO commitment here.
