Senior DevOps Engineer

Fortress Affinity Management (FAM) is Higginbotham's standalone affinity insurance platform, purpose-built to turn group relationships into scalable, recurring insurance programs. FAM provides the complete infrastructure needed to support these programs, including digital intake systems, member portals, and dedicated service teams, all aimed at reducing friction and improving results for both producers and their clients. Because those member-facing systems run continuously for live client groups, the platform depends on reliable cloud infrastructure and disciplined release practices — which is where this role sits. Position Summary: The Sr. DevOps Engineer is the dedicated, full-time owner of uptime and infrastructure for the company's web services, Blazor applications, and supporting tools across Azure, AWS, and Cloudflare. Day to day, this role owns CI/CD pipelines, environment provisioning, the team's shared development environment, and incident response for live client environments. As the application portfolio grows, this role keeps infrastructure, pipelines, and reliability practices scaling alongside it. Supervisory Responsibilities: None Key Responsibilities: Infrastructure & Cloud Operations Own and operate Azure infrastructure supporting the company's web services and Blazor applications, including App Service, Key Vault, Managed Identity, and Entra ID, and maintain backup, failover, and resiliency across those environmentsAdminister AWS resources supporting the company's AI/automation tooling (e.g., Bedrock) and related servicesManage Cloudflare configuration for CDN, WAF, and bot protection across public-facing applicationsMaintain and support the team's shared Linux development environment used for AI-assisted development tooling CI/CD & Release Engineering Own and extend Azure DevOps Pipelines across the company's web services, Blazor applications, and supporting toolsBuild and maintain Infrastructure as Code (Bicep or Terraform) for repeatable, auditable environment provisioningSupport database migration deployment and environment promotion practices across dev, test, and productionPartner with developers to keep build, test, and deployment pipelines fast and reliable as the project portfolio grows Reliability & Incident Response Serve as the primary on-call owner for platform uptime across live client environments, including after-hours response to production incidents — not only deployment windowsMonitor logging and telemetry sources to catch and respond to issues proactivelyLead incident response and post-incident review for platform outages or degraded serviceMaintain and continuously improve infrastructure documentation and runbooksManage secrets, certificates, and identity-based access across environments — including Key Vault, Managed Identity, and AWS IAM — and keep infrastructure patched and configurations hardened Core Competencies Ability to Analyze and Solve Problems: Skill in diagnosing production issues under time pressure, evaluating options with incomplete information, and implementing effective solutions quickly during and after active incidentsAttention to Detail: A strong focus on completing tasks and projects accurately and thoroughlyCommunication Skills: Capable of expressing ideas clearly in both verbal and written forms and engaging with various audiencesTimely Task Completion: Ability to finish tasks and projects efficiently, managing resources and priorities effectivelyTeam Collaboration: Willingness to work together with others, promoting teamwork and supporting shared goalsClient Focus: Dedication to understanding and addressing the needs of clients and stakeholders to ensure their satisfactionDependability: Consistent availability and follow-through, including reliable on-call responsiveness and clear communication during and after incidentsCreative Thinking: Openness to suggesting new ideas and methods to improve processes and outcomeOrganizational Skills: Capability to prioritize tasks and manage multiple projects simultaneouslyAdaptability: Willingness to adjust to changing situations and priorities, showing resilience in a dynamic work environment Experience & Education 5+ years of experience in a DevOps, site reliability, or infrastructure engineering role requiredHands-on experience with Azure DevOps Pipelines (CI/CD) required — must be able to own and extend existing pipelinesExperience with Infrastructure as Code (Bicep or Terraform) requiredLinux administration experience (shell scripting, terminal multiplexers) requiredAWS administration experience required (IAM, S3; exposure to Bedrock or comparable AI services a plus)Cloudflare experience required (WAF, DNS, bot protection) for protecting public-facing applicationsExperience with structured logging, monitoring, and alerting tooling (e.g., Serilog, Seq, or comparable) requiredBachelor's degree in Computer Science, Information Technology, or a related field preferred; equivalent combination of education and work experience will be considered Licensing & Credentials Azure certification (AZ-400 or AZ-104) a plus Systems & Technical Skills Microsoft Azure (App Service, Key Vault, Managed Identity, Entra ID)Azure DevOps PipelinesInfrastructure as Code (Bicep or Terraform)Linux administration, shell scriptingAWS (Bedrock, IAM, S3)Cloudflare (WAF, DNS, bot protection)Structured logging/monitoring tools (e.g., Serilog, Seq, or comparable) Physical Requirements Ability to lift 25 poundsRepeated use of sight to read documents and computer screensRepeated use of hearing and speech to communicate on telephone and in personRepetitive hand movements, such as keyboarding, writing, 10-keyWalking, bending, sitting, reaching and stretching in all directions Benefits & Compensation: Higginbotham offers medical, dental, vision, prescription drug coverage, 401K, equity incentive plan as well as multiple supplemental benefits for physical, emotional, and financial wellbeing. Employee Wellness Program Company paid holidays, plus PTO Notice to Recruiters and Staffing Agencies: To protect the interests of all parties, Higginbotham Insurance Agency, Inc., and our partners, will not accept unsolicited potential placements from any source other than directly from the candidate or a vendor partner under MSA with Higginbotham. Please do not contact or send unsolicited potential placements to our team members. Applications will be accepted until the position is filled