co.brick Talents

Devops Engineer

160 - 170 PLN/ godz./ godz.B2BB2B (netto)

SeniorZdalnie·GliwicePart-time·B2B

#469862·Dodano 8 dni temu·2

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

AzureMicrosoft Entra IDTerraformBicep

Podsumowanie oferty

Implement a secure, well-documented Azure landing zone based on the Azure Cloud Adoption Framework, working alongside a DevOps Architect and directly with the client’s technical team. The engagement focuses on Azure and Microsoft Entra ID, with infrastructure as code using Terraform and/or Bicep.

Wymagania

Proven hands-on delivery of Azure Landing Zones (ALZ) aligned with the Azure Cloud Adoption Framework (CAF).
Deep expertise in Microsoft Entra ID, including tenant configuration, custom RBAC, PIM, Conditional Access, and workload identity federation (OIDC).
Strong Infrastructure as Code skills using Terraform (preferred) and/or Bicep.
Experience with CI/CD automation for infrastructure using Azure DevOps Pipelines or GitHub Actions.
Solid understanding of Azure Governance, security (Azure Policy, Defender for Cloud, Key Vault), networking, storage, compute, high availability, and observability.
English at C1+ level, spoken and written, for direct client communication.
Able to execute an architect’s design, deliver within a fixed two-month window while working 50–70%, explain technical trade-offs to non-technical stakeholders, document work, and troubleshoot deployments or access issues.

Nice to have:

Microsoft certifications: AZ-104, AZ-305, AZ-400, or SC-300.
Experience with Entra External ID, Azure Front Door, and WAF.
Previous experience in consulting or client-facing roles.

Obowiązki

Implement the platform foundation as Infrastructure as Code, including management group hierarchy, subscriptions, policies, networking, and identity.
Configure Microsoft Entra ID, including the RBAC model, PIM, Conditional Access, groups, managed identities, and workload identity federation for pipelines.
Build and maintain CI/CD pipelines for infrastructure deployment, including security scanning and approval gates.
Set up monitoring, logging, alerting, and cost management baselines.
Test deployments and support the client during handover.
Produce technical documentation, including runbooks, IaC module documentation, and architecture diagrams.

Inne informacje

Two-month engagement; extension is possible but not guaranteed.
Immediate availability required.

co.brick Talents

11 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz