Principal Devops Engineer

We are looking for a Sr. Principal Devops Engineer. This is an onsite, full-time permanent hire position in Raleigh, North Carolina with our client. No visa sponsorship is available at this time or in the future for this position. In this role as a Senior Azure DevOps Engineer, you will own the design and direction of our Infrastructure as Code, Azure CI/CD pipelines and serves as the primary technical bridge between the DevOps and application development teams. As a Principal Azure DevOps Engineer, you are expected to operate with significant autonomy, make architectural decisions that affect multiple teams, and elevate the work of the engineers around them. Responsibilities as a Principal Azure DevOps Engineer: Architect Azure DevOps YAML pipelines and reusable pipeline templates across the organizationLead the design, refactoring, and governance of our Bicep module libraryEstablish module boundaries, parameter conventions, target-scope strategy, and versioning approach across subscriptions and environmentsServe as the embedded technical partner for application development teams. Sit in design reviews, translate platform constraints into developer-friendly patterns, and translate developer needs into platform capabilitiesDrive measurable improvements in deployment frequency, lead time for changes, change failure rate, and mean time to recovery (DORA metrics)Build the instrumentation needed to prove itPartner closely with the Security team on Azure Policy and Defender postureEliminate operational toil through self-service toolingMentor DevOps I and II engineers and developers learning IaC. Review PRs as a teaching opportunity, not a gate. Write the ADRs, runbooks, and onboarding docs Lead post-incident reviews focused on systemic fixes. Participate in platform on-call rotationRequired Skills and Qualifications as a Principal Azure DevOps Engineer: 8+ years in DevOps, SRE, Platform, or Cloud Engineering, with at least 4 years focused on Azure at enterprise scale (multi-subscription, multi-environment)Deep, demonstrable expertise authoring Azure DevOps YAML pipelines — multi-stage pipelines, reusable templates, parameterized template libraries, deployment jobs, environments, approvals, and variable group strategyProduction-grade Bicep authorship: modular design, parameter and output discipline, conditional deployments, all target scopes (resourceGroup, subscription, managementGroup, tenant), and integration with deployment stacks or ARM what-if workflowsStrong PowerShell scripting for automation, remediation, and tooling. Comfortable with Az PowerShell modules and Microsoft Graph PowerShellSolid command of Git workflows and a clear point of view on branching, PR review, and release strategy at scaleWorking expertise across Azure core services: Entra ID, Key Vault, Storage, App Service, Functions, AKS or Container Apps, Application Gateway, Front Door, Log Analytics, and Azure MonitorProven ability to work directly with application developers as a technical peerExperience setting standards and getting them adopted without formal authority — through code, documentation, and conversationNice to Have Microsoft certifications: AZ-400 (DevOps Engineer Expert), AZ-305 (Solutions Architect Expert), AZ-104