DevOps Engineer

You’ll be joining a cloud platform modernization project focused on migrating legacy and retained services onto a new Azure-based platform built around AKS, Terraform, Helm, and Azure DevOps. The project involves moving live services and CI/CD pipelines to a standardized, reusable platform while decommissioning obsolete infrastructure. This is a hands-on opportunity to work on a large-scale cloud environment, covering infrastructure automation, Kubernetes, networking, security, CI/CD, and cloud cost optimization. You’ll work closely with DevOps and engineering teams throughout the full project lifecycle, from migration and platform changes to troubleshooting, optimization, and operational handover. Our client is a global IT services and managed services provider specializing in cloud infrastructure, IT consulting, and supporting mission-critical enterprise environments. Key responsibilities Porting legacy and retained services onto the new AKS clusters and subscriptions, and moving their CI/CD pipelines into the new Azure DevOps project using shared pipeline templatesExtending Terraform across multiple IaC layers, including compute, infrastructure, hub, global infrastructure, and monitoringCreating and maintaining Helm charts for individual servicesImplementing traffic-routing changes to move internal calls away from Cloudflare, including adjustments to Front Door, WAF, firewall, DNS, and origin configurationSafely decommissioning obsolete infrastructure while maintaining awareness of Terraform state and dependenciesRight-sizing and optimizing Cosmos DB and Redis, including throughput/RU, tiers, scaling, cost, and overall performanceContributing to security hardening across the platformMaintaining healthy and reliable CI/CD pipelinesHandling general infrastructure work across the platform, including day-to-day platform engineering, provisioning, configuration changes, drift remediation, backlog items, and BAU ticketsSupporting other teams in onboarding their services onto the platformCreating clear runbooks and handover documentation to enable SRE teams to operate and maintain the delivered solutionsIdeal candidate profile Terraform: strong experience with modules, workspacesAzure: hands-on experience with hub-and-spoke landing zones, AKS, Front Door, Application Gateway + WAF, Azure Firewall, APIM, VNets, Private Endpoints, Key Vault, Managed/Workload Identity, and RBACKubernetes & Helm: experience authoring and maintaining Helm charts, working with deployments, services and ingress, workload identity, resource requests/limits, scaling, and troubleshooting cluster workloadsNetworking & security: experience with Front Door and WAF policies, firewall rule design, DNS, origins and routing, TLS, and specifically migrating traffic from Cloudflare to Azure-native edge servicesCI/CD: strong Azure DevOps Pipelines experience, with an understanding of thin pipelines that delegate build and deployment logic to a task runner such as Make, Task, or an equivalent solution, keeping the logic portable and testable outside CI; experience integrating security scanning into CI/CD pipelinesCost & scaling: demonstrable experience with right-sizing and optimizing Cosmos DB, including RU/autoscale, and Redis, including tier selection and clustering, as well as general Azure cost awarenessMigration: proven experience moving live services between subscriptions, clusters, or Azure DevOps projects with minimal downtime and well-planned cutover and rollback proceduresWays of working: strong Git-based trunk/PR workflows, Infrastructure as Code code reviews, clear technical documentation, and the ability to work independently in a senior contract capacityEnglish: B2 level or higherConditions Rate: 150–180 PLN net/hFull-time B2B contract100% remote workLocation: PolandEnglish: B2 / fluentBenefits: Private medical care, Multisport card, life insuranceStart: ASAPRecruitment steps Initial call with HR15–30 min screening call with a team member or Team LeadFinal technical interview, potentially including a coding/whiteboard taskDiscussion focused on practical technical knowledge and previous projects