2025-0303 Support for DevSecOps Engineering

• Operation of cloud infrastructure in
  Microsoft Azure by leveraging DevSecOps practices:
  
• Deploy and manage landing zones by utilizing
  DevSecOps practices to ensure a secure, scalable foundation for cloud
  workloads;
  
• Deploy and manage cloud workloads on top of
  the landing zones in an automated fashion;
  
• Utilize Infrastructure as Code and CI/CD
  pipelines through Azure Devops;
  
• Build, deploy and maintain containerized
  workloads using Azure Kubernetes Services (AKS);
  
• Deploy and monitor Azure Virtual Machines
  (VMs), including sizing, patching, backup, performance tuning and cost
  optimization;
  
• Build and maintain automated disaster
  recovery and backup solutions using services like Azure Backup, Site Recovery
  and storage replication;
  
• Monitor the performance and effectiveness of
  landing zones and cloud workloads;
  
• Identify opportunities for improvement and
  implement optimizations to enhance security and efficiency.
  
• Support for application deployment and
  troubleshooting:
  
• Manage secure and reliable access to
  applications for end-users including configuration of Azure Application
  Gateways, Azure load-balancers and custom domains;
  
• Monitor Application availability,
  performance and security using services such as Azure Monitor, Log Analytics,
  Application insights and configure automated alerts;
  
• Provide support for Microsoft Azure Services
  - related issues, including troubleshooting access, networking and cloud
  resource specific issues; 
  
• Maintain comprehensive documentation for
  Microsoft Azure Services processes, configurations, and workflows;
  
• Security and Compliance:
  
• Implement and manage governance controls
  such as Azure policies to ensure compliance with organizational standards;
  
• Ensure all deployed workloads and services
  adhere to Zero trust security principles, including proper network
  segmentation, identity-base access control and logging; 
  
• Conduct regular audits and reviews of access
  controls and permissions.
  
• Collaboration and Communication:
  
• Collaborate with IT security, compliance,
  and other relevant teams to ensure cohesive cloud resources management
  strategies.
  
• Contribute to the lifecycle of cloud secure
  products in collaboration with the CTO CCOE to ensure reusable, secure and
  automated infrastructure modules
  
• Communicate effectively with stakeholders to
  understand IaaS and Paas requirements and address concerns.
  
• Automation and Efficiency:
  
• Identify opportunities to enhance efficiency
  through automation and proactively implement solutions.
  
• Champion continuous improvement by
  evaluating new Azure capabilities, DevOps tools and security practices and
  integrate them into operations.
  
• Lead operational readiness for new cloud
  solutions, by establishing runbooks, knowledge base transfer sessions and
  handover to support teams
  

Requirements

• Technical Expertise:
  
• In-depth knowledge of Microsoft Azure Cloud
  IaaS/PaaS Services;
  
• Proficiency in designing, deploying and
  managing landing zones in Microsoft Azure by leveraging IaC and CI/CD
  pipelines;
  
• Expertise in managing governance controls
  such as Azure Policy;  
  
• Experience in building, deploying and
  maintaining containerized workloads using Azure Kubernetes Services (AKS);
  
• Experience in managing deploying and
  monitoring Azure Virtual Machines (VMs);
  
• Expertise in enabling secure and reliable
  access to applications for end users.
  
• Analytical and Problem-Solving Skills:
  
• Strong analytical skills to assess and
  improve DevSecOps processes and workflows;
  
• Ability to troubleshoot complex Microsoft
  Azure Services issues and implement effective solutions.
  
• Security and Compliance Knowledge:
  
• Understanding of security best practices and
  compliance requirements related to Microsoft Azure services and DevSecOps
  practices;
  
• Experience conducting audits and ensuring
  adherence to regulatory standards.
  
• Communication and Collaboration:
  
• Excellent communication skills to
  effectively collaborate with IT teams, stakeholders, and end-users;
  
• Ability to document processes clearly and
  provide training on Microsoft Azure Services and DevSecOps practices.
  
• Organizational Skills:
  
• Strong organizational skills to manage
  multiple tasks and priorities effectively;
  
• Attention to detail in managing user
  accounts, groups, and access controls.
  
• Team Collaboration:
  
• Ability to work effectively as part of a
  team and share knowledge and resources;
  
• Willingness to collaborate with colleagues
  to solve complex issues.
  
• Others:
  
• The Contractor has strong customer
  relationship skills, including negotiating complex and sensitive situations
  under pressure;
  
• Full proficiency in the English language.
  French language proficiency is of advantage.