DevOps Engineer | Live Entertainment Company

Contract type
Ongoing
Work mode
Remote
Experience
Mid-level · 3+ years

Job description

DevOps Engineer building and running Azure platforms on a hub-and-spoke network design with AKS and container workloads for an international live entertainment company, working alongside a platform lead and product development teams.

At a glance

Employment
Full-time
Work mode
Remote
Languages
English – Professional working proficiency (Upper-Intermediate or abov

What you'll do

  • Build and maintain Azure infrastructure as code using Terraform.
  • Build and operate hub-and-spoke networks with secure, private connectivity between services.
  • Run AKS clusters and containerized workloads in production.
  • Build and maintain CI/CD pipelines in GitHub Actions and Azure DevOps.
  • Deliver applications to Kubernetes using GitOps workflows.
  • Configure edge routing, ingress, and security: DNS, TLS certificates, and basic WAF/gateway setups.
  • Set up monitoring, centralized logging, and proactive alerting.
  • Implement identity and security baselines: Managed Identities, Azure RBAC, secrets management, and policies.
  • Collaborate on architectural discussions: review technical proposals, surface operational risks, and contribute to runbooks and design records.
  • Support development teams day to day: local development workflows, Dockerfiles, and debugging in shared environments.

What we're looking for

  • 3+ years in DevOps or platform engineering, with at least 2 years supporting Azure in production.
  • Strong understanding of Azure resource hierarchy: Management Groups, Subscriptions, Resource Groups, and naming/tagging conventions.
  • Identity & access management: Microsoft Entra ID, Azure RBAC, and Managed Identities.
  • Hands-on experience with core resources: Storage Accounts (Blob/Files), Key Vault, Azure Container Registry (ACR), and Log Analytics.
  • Terraform: writing modular code, managing remote state, handling multiple environments, and understanding state locking.
  • Scripting & OS fundamentals: Linux, Bash, and PowerShell.
  • Version control with Git.
  • Containers: building, optimizing, and debugging Dockerfiles; local setups using Docker Compose.
  • AKS in Production: cluster provisioning, node pools, autoscaling, ingress controllers, and upgrades.
  • Kubernetes Operations: core workload manifests (Deployments, Services, ConfigMaps, Secrets), Helm chart usage, and troubleshooting via kubectl.
  • Hub-and-spoke topology: VNet peering, subnet design, and IP address planning (CIDR).
  • Private access for PaaS: hands-on experience securing services via Private Endpoints, Private Link, and Azure Private DNS Zones.
  • Network boundaries: Network Security Groups (NSGs) and NAT Gateways.
  • Secure administrative access: Azure Bastion and VPN Gateway (Site-to-Site / Point-to-Site).
  • Pipelines: hands-on delivery pipelines using either GitHub Actions or Azure DevOps Pipelines (building images, running tests, pushing artifacts, executing Terraform).
  • Observability: Azure Monitor, Log Analytics workspace queries (KQL basics), Application Insights, and alert configuration.
  • Professional working proficiency in English (Upper-Intermediate or above).

Nice to have

  • Advanced Networking & Traffic Routing: Azure Firewall, User-Defined Routes (UDRs / forced tunneling), Application Security Groups (ASGs), Azure DNS Private Resolver.
  • Edge & Delivery: Azure Front Door, Application Gateway, Cloudflare (DNS, CDN, WAF, Zero Trust, Cloudflare Terraform Provider).
  • Advanced Kubernetes & GitOps: Argo CD, Flux, Workload Identity / OIDC federation, Azure CNI Overlay, Cilium, Network Policies, cert-manager, external-dns, KEDA.
  • Security & Governance: Azure Policy, Microsoft Defender for Cloud, container vulnerability scanning (Trivy), static analysis (TFLint, Checkov).
  • Extended Azure Services: Azure Container Apps, App Service, Azure Functions, Azure Database for PostgreSQL/MySQL Flexible Server, Azure Managed Redis, Service Bus.
  • Landing Zones & Architecture: Azure Landing Zones (CAF), Virtual WAN, ExpressRoute.
  • Certifications: AZ-104, AZ-700, AZ-400, CKA, or HashiCorp Certified: Terraform Associate.
  • Experience building, containerizing, and deploying PHP and Node.js/React applications.

How to get hired

  1. 1GT interview with Recruiter
  2. 2Technical interview with GT
  3. 3Cultural Fit & Experience interview with the Client
  4. 4Final interview with the Client
  5. 5Offer

Apply

About the company

GT was founded in 2019 by a former Apple, Nest, and Google executive. On behalf of our client, an international company in the live entertainment industry, GT is looking for an experienced DevOps Engineer.

Key facts

  • 2019
  • Founded in 2019 by a former Apple, Nest, and Google executive
  • Recruiting on behalf of an international company in the live entertainment industry