Devops Engineer

co.brick talents — powered by AI, powered by people.

Azure Platform / DevOps Engineer

Location: Fully remote

Workload: Part-time, 50–70%

Duration: 2 months (extension possible, not guaranteed)

Start Date: ASAP (immediate availability required)

Rate: 160-170 PLN/h net B2B

About the Role: We are looking for a hands-on Azure Platform Engineer with deep Azure and Microsoft Entra ID expertise for a two-month, part-time engagement. In this role, you will work side by side with our DevOps Architect, translating target architecture designs into a secure, well-documented Azure landing zone based on the Azure Cloud Adoption Framework (CAF). You will also maintain direct contact with the client's technical team.

Key Responsibilities:

• Implement the platform foundation as Infrastructure as Code, including management group hierarchy, subscriptions, policies, networking, and identity.
• Configure Microsoft Entra ID, including the RBAC model, PIM, Conditional Access, groups, managed identities, and workload identity federation for pipelines.
• Build and maintain CI/CD pipelines for infrastructure deployment, including security scanning and approval gates.
• Set up monitoring, logging, alerting, and cost management baselines.
• Test deployments and support the client during handover.
• Produce clear technical documentation, including runbooks, IaC module docs, and architecture diagrams.

Requirements:

• Proven hands-on delivery of Azure Landing Zones (ALZ) in alignment with Azure CAF.
• Deep expertise in Microsoft Entra ID, including tenant configuration, custom RBAC, PIM, Conditional Access, and workload identity federation (OIDC).
• Strong Infrastructure as Code skills using Terraform (preferred) and/or Bicep.
• Experience with CI/CD automation for infrastructure using Azure DevOps Pipelines or GitHub Actions.
• Solid understanding of Azure Governance, Security (Azure Policy, Defender for Cloud, Key Vault), Networking, Storage, Compute, High Availability, and Observability.
• English at a C1+ level (spoken and written) for direct client communication.

Nice-to-Have:

• Microsoft certifications: AZ-104, AZ-305, AZ-400, or SC-300.
• Experience with Entra External ID, Azure Front Door, and WAF.
• Previous experience in consulting or client-facing roles.

Soft Skills & Work Approach:

• Works well under direction: Executes an architect's design faithfully and raises concerns early rather than redesigning alone.
• Fast, organised, and self-driven: Capable of delivering within a fixed 2-month window while working 50–70%.
• Clear communicator: Able to explain technical trade-offs to non-technical stakeholders and work directly with clients.
• Documentation-oriented: Writes documentation as an integral part of the job, not as an afterthought.
• Problem-solver: Calm and structured when troubleshooting failed deployments or access issues.