Job Family:

Systems Engineering

Travel Required:

Up to 10%

Clearance Required:

Ability to Obtain Public Trust

What You Will Do:

As the Sr. Azure DEVOPS Engineer you will be responsible for mission critical support of all department owned applications and their infrastructure. You will be responsible for ensuring proper monitoring, scale, and resiliency across all environments from test to production. Responsibilities include closely with the development team to break fix code, design and implement application build and deployment solutions. You will also partner with the software infrastructure and production assurance teams to introduce platform provisioning and standardized configuration management.

Responsibilities:

Design, build, and maintain Azure landing zones and platform services (e.g., VNet, Private Endpoints, Key Vault, Azure Firewall/NSGs, Application Gateway/WAF).
Implement Infrastructure as Code (IaC) with Terraform and/or Bicep; enforce GitOps workflows (branching, PRs, policy checks).
Create reusable modules, pipelines, and golden patterns for app teams; champion automation-first approaches.
Define and measure SLIs/SLOs, error budgets, and reliability roadmaps for critical services.
Implement and tune observability (logs, metrics, traces) using Azure Monitor, Log Analytics, Application Insights, and Prometheus/Grafana where applicable.
Conduct capacity planning, resiliency testing (chaos, failover, DR), and performance tuning across services.
Build secure, robust CI/CD pipelines (GitHub Actions / Azure DevOps Pipelines) with automated testing, scans, and approvals.
Standardize deployment strategies (blue/green, canary, rolling) for containerized and PaaS workloads.
Manage container platforms (AKS: node pools, cluster autoscaling, HPA/VPA, ingress, network policies) and registries (ACR).
Implement guardrails using Azure Policy, RBAC, PIM, and Blueprints (or equivalent) to enforce least privilege and compliance (e.g., SOC 2, ISO 27001, HIPAA as relevant).
Manage secrets and certificates (Key Vault) and integrate security testing (SAST/DAST/Container scanning) into pipelines.
Support vulnerability remediation and patching SLAs.
Own incident response, including rotational shifts and on-call; lead triage, root cause analysis (RCA), and post-incident reviews.
Optimize cost (FinOps), tagging standards, budgets, and proactive spending alerts.
Maintain runbooks, knowledge base articles, and automation for routine operations.
Act as a technical mentor; review designs/PRs; contribute to architecture decisions.
Partner with app teams to onboard workloads, define nonfunctional requirements, and drive platform adoption.
Manage and or Participate in the deployment and release of development, test and production software builds.
Manage the operations and monitoring of applications and infrastructure from dev to production.
Develop code and escalate break fix issues that may occur.
Task automation of infrastructure and application provisioning.
Ensure all environments meet scale and resiliency requirements.
Support customer facing and internal applications.
Monitor submitted tickets; assign, escalate and communicate, as required.
Participate in services and software systems design.
Participate in rotating on-call support duties.

What You Will Need:

Minimum Six (6) of hands-on experience with Azure-based infrastructure and services in production.
Bachelor’s degree in computer science (or related). Additional Four (4) years of experience is needed in lieu of degree.
3+ years of experience supporting enterprise level applications and their infrastructure.
Strong understanding of web and their related infrastructure technologies (load balancers, DNS, IIS or Apache/WebSphere, authentication and authorization, database connections, etc.).
Experience implementing or managing Application Monitoring, Splunk, or Dynatrace.
Working knowledge in Automation technologies.
Familiarity with Agile/Scrum methodologies.
Deep expertise in several of: AKS, App Services, Functions, APIM, Azure SQL/MI, Cosmos DB, Storage, Event Hub/Service Bus, Redis, VNet/Peering, Private Link, Application Gateway/WAF, Front Door.
Strong IaC with Terraform (preferred) and/or Bicep; Git-based workflows; GitHub or Azure DevOps.
Proven SRE background: SLI/SLO design, error budgets, incident management, RCA, capacity and performance engineering.
CI/CD design and operations (GitHub Actions / Azure DevOps Pipelines); artifact/versioning strategies; release governance.
Observability with Azure: Monitor, Log Analytics, Application Insights, and alerting/automations (Action Groups, Logic Apps, Functions).
Solid networking fundamentals (DNS, TLS, routing, firewalls, load balancing), identity (AAD/Entra ID), and secrets management (Key Vault).
Scripting proficiency in PowerShell and/or Python; Linux fundamentals.
Understanding of security best practices: RBAC, PIM, Azure Policy, managed ide
Ability to present to and communicate effectively with both technical and non-technical teams, supporting cross-functional collaboration and alignment.
Demonstrates a customer driven approach and good relationship management skills.
Ability to work autonomously and under deadlines.
Ability to multi-task, be highly organized, and work independently.
Ability to identify areas of improvement and come up with creative solutions.
US citizen and Green Card holders only.
No sponsorship available for this position.
Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY are preferred.

What Would Be Nice To Have:

Working knowledge of mainframe architecture is a plus.
At least 3 years coding/scripting JAVA, JavaScript and HTML

The annual salary range for this position is $118,000.00-$196,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Parental Leave
401(k) Retirement Plan
Group Term Life and Travel Assistance
Voluntary Life and AD&D Insurance
Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
Transit and Parking Commuter Benefits
Short-Term & Long-Term Disability
Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Care.com annual membership
Employee Assistance Program
Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
Position may be eligible for a discretionary variable incentive bonus

About Guidehouse

Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.