[CPG] DevOps Engineer - Cloud (Azure)

Project – the aim you’ll have

You will join the Cloud Service Unit, strengthening DevOps capabilities across key engagements. The role focuses on designing, implementing, and operating a secure, scalable Azure platform (Azure Landing Zone) and automating CI/CD pipelines. Your work will enable reliable delivery, faster releases, and consistent governance while supporting teams building data‑, cloud‑, and AI‑driven solutions.

Position – how you’ll contribute

• Design, implement, and operate Azure Landing Zones (subscriptions, RBAC, Management Groups, networking).
• Build and maintain Infrastructure as Code using Terraform/Bicep with modular, testable setups.
• Create and optimize CI/CD pipelines (Azure DevOps and/or GitHub Actions) integrated with Terraform, Docker, Kubernetes, and Helm.
• Operate and evolve AKS clusters (deployments, Helm charts, autoscaling, network policies); apply GitOps (e.g., Argo CD).
• Implement secure networking (VNet, NSG, Private Endpoints, load balancing) and enterprise governance.
• Collaborate closely with development, architecture, and data teams; share best practices and documentation.
• Drive automation and continuous improvements via scripting (Python/PowerShell/Bash).

Expectations – the experience you need

• Strong IaC expertise with Terraform (priority), incl. modular configs (Terragrunt, remote state, workspaces) and infra tests (terraform test/Terratest); experience with Bicep.
• Hands-on Azure Landing Zone & Governance: subscriptions, RBAC, Management Groups, Azure Policy at enterprise scale.
• Proven CI/CD experience (Azure DevOps/GitHub Actions) with deployment strategies (blue/green, rolling, canary).
• Practical AKS experience: manifests, Helm, HPA/KEDA, Cluster Autoscaler, network policies; GitOps workflows.
• Scripting and automation using Python or PowerShell/Bash; integration with Azure APIs/Graph API.
• Strong collaboration skills; ability to work independently, communicate clearly, and focus on outcomes.

Additional skills – the edge you have

• HashiCorp Vault (secrets, identity-based access) and Packer.
• Observability with Grafana/Prometheus, Fluentd; Azure Monitor/Log Analytics and alerting (e.g., Logic Apps).
• Azure ML / AI/ML infrastructure experience (workspaces, managed identity, datastores).
• Exposure to multi-cloud environments (AWS, GCP).

Our offer – professional development, personal growth:

• Flexible employment and remote work
• International projects with leading global clients 
• International business trips
• Non-corporate atmosphere 
• Language classes 
• Internal & external training 
• Private healthcare and insurance
• Multisport card 
• Well-being initiatives 

Position at: Software Mind Poland

This role requires candidates to be based in Poland.