Note: The job is a remote job and is open to candidates in USA. Makai Labs builds and operates cloud platforms for its clients. The Senior Azure Platform / DevOps Engineer designs, builds, and maintains Azure platforms, including reusable Terraform foundations, and supports clients with architecture decisions, migrations, and platform operations.
Responsibilities
- Stand up new platforms from scratch: network, compute, data, and the pipeline to ship to them
- Make the architecture calls and live with them. That includes knowing when a Terraform change is a safe in-place update and when it's a destroy-and-replace you should never run blind against production
- Run migrations that carry real risk. Move a live platform onto a new foundation, read the plan correctly, write the runbook, and have a rollback ready before you start
- Keep platforms healthy over time: provider upgrades, drift, security, and not letting a shared foundation rot as more clients land on it
- Work directly with the client's own DevOps engineers. Often they're the ones running the apply and you're advising, so you need to explain a plan, unblock a failure quickly, and be someone the engineer holding the keys trusts
Skills
- Azure experience is the hard requirement
- You've built and run production Azure yourself, not just used modules someone else wrote
- Azure networking is where most of the work lives: VNets and subnets, private endpoints and private DNS zones, NSGs and UDRs, NAT, Application Gateway and WAF, load balancers, and hub-and-spoke / Virtual WAN
- Terraform on Azure, with state treated as something you respect: workspaces, migrations, imports, remote backends, and the discipline not to force an apply through a lifecycle guard
- The delivery path: Azure Container Registry, VM Scale Sets and cloud-init, and CI/CD with Azure DevOps or GitHub
- Azure data services: Postgres Flexible Server, managed Redis, Blob storage, and a real sense of their sizing, failover, and cutover risks
- Entra ID and RBAC: app registrations, service principals, role assignments scoped properly across subscriptions
- Clear writing and a level head on a live call. You can hand someone a runbook they can follow without you in the room
- Candidates must be authorized to work in the US. No visa sponsorship is available for this position
- Azure certs (AZ-104, AZ-305)
- Temporal or similar workflow runtimes, and scripting (Bash, Python) for the glue
- Past consulting or client-embedded work. You've been the outside expert before
Benefits
- Remote work
Company Overview