We are looking for a Principal Azure DevOps Engineer. This is an onsite, full-time permanent hire position in Raleigh, North Carolina with our client. No visa sponsorship is available at this time or in the future for this position. In this role as a Senior Azure DevOps Engineer, you will own the design and direction of our Infrastructure as Code, Azure CI/CD pipelines and serves as the primary technical bridge between the DevOps and application development teams. As a Principal Azure DevOps Engineer, you are expected to operate with significant autonomy, make architectural decisions that affect multiple teams, and elevate the work of the engineers around them.
Responsibilities as a Principal Azure DevOps Engineer:
- Architect Azure DevOps YAML pipelines and reusable pipeline templates across the organization
- Lead the design, refactoring, and governance of our Bicep module library
- Establish module boundaries, parameter conventions, target-scope strategy, and versioning approach across subscriptions and environments
- Serve as the embedded technical partner for application development teams. Sit in design reviews, translate platform constraints into developer-friendly patterns, and translate developer needs into platform capabilities
- Drive measurable improvements in deployment frequency, lead time for changes, change failure rate, and mean time to recovery (DORA metrics)
- Build the instrumentation needed to prove it
- Partner closely with the Security team on Azure Policy and Defender posture
- Eliminate operational toil through self-service tooling
- Mentor DevOps I and II engineers and developers learning IaC. Review PRs as a teaching opportunity, not a gate. Write the ADRs, runbooks, and onboarding docs
- Lead post-incident reviews focused on systemic fixes. Participate in platform on-call rotation
Required Skills and Qualifications as a Principal Azure DevOps Engineer:
- 8+ years in DevOps, SRE, Platform, or Cloud Engineering, with at least 4 years focused on Azure at enterprise scale (multi-subscription, multi-environment)
- Deep, demonstrable expertise authoring Azure DevOps YAML pipelines multi-stage pipelines, reusable templates, parameterized template libraries, deployment jobs, environments, approvals, and variable group strategy
- Production-grade Bicep authorship: modular design, parameter and output discipline, conditional deployments, all target scopes (resourceGroup, subscription, managementGroup, tenant), and integration with deployment stacks or ARM what-if workflows
- Strong PowerShell scripting for automation, remediation, and tooling. Comfortable with Az PowerShell modules and Microsoft Graph PowerShell
- Solid command of Git workflows and a clear point of view on branching, PR review, and release strategy at scale
- Working expertise across Azure core services: Entra ID, Key Vault, Storage, App Service, Functions, AKS or Container Apps, Application Gateway, Front Door, Log Analytics, and Azure Monitor
- Proven ability to work directly with application developers as a technical peer
- Experience setting standards and getting them adopted without formal authority through code, documentation, and conversation
Nice to Have
- Microsoft certifications: AZ-400 (DevOps Engineer Expert), AZ-305 (Solutions Architect Expert), AZ-104