Senior Azure Platform / DevOps Engineer

About Makai

Makai uses best-in-class AI and data to solve real-world operational and strategic challenges at scale. We help businesses with enterprise automation, human-machine teaming, product design and development, and market intelligence. Until now, people have had to learn and adapt to software. Makai creates solutions that adapt to people because technology will never be 100% accurate. People are essential for all of our human-machine teaming solutions.

About the role

At Makai, we build and run cloud platforms for clients in healthcare and other high-stakes industries. You take a platform from an empty Azure subscription to production, make the architecture calls and live with them, and own the infrastructure as code, the pipelines and the monitoring. Much of this runs inside our clients’ own Azure environments, so you work with their infrastructure teams daily: reviewing their designs, explaining what we need and why, and keeping work moving when it depends on them.

The ideal candidate will be able to

Design, build and maintain Azure environments with Terraform across multiple subscriptions, from networking and identity to a running application

Build and maintain CI/CD for applications and infrastructure in Azure DevOps, GitHub Actions and similar platforms: release promotion with approvals, secure deployment identities and repository synchronization

Operate the compute and runtime platforms, from virtual machines to containers and PaaS: base images, upgrades, patching, rolling deployments, autoscaling and capacity planning

Design and tune monitoring, logging and alerting with Azure Monitor, Log Analytics and Application Insights

Design and operate the identity and access model: Entra ID, SSO, workload identities, role- and attribute-based access control, privileged and just-in-time access, and secrets in Key Vault

Design and maintain secure network architectures: hub-and-spoke and Virtual WAN, private endpoints and DNS, Application Gateway and WAF, Azure Firewall, NSGs and isolation between environments

Maintain security and compliance: vulnerability remediation, patching, Azure Policy, and audits against client policies and regulatory frameworks

Design and run backup, high availability and disaster recovery: recovery objectives, zone and region redundancy, restore testing, DR drills and failover

Own production changes and incidents: formal change management with verification and rollback, and troubleshooting through to root cause

Act as the technical counterpart to clients’ infrastructure and security teams: design reviews, proposals, change requests and runbooks

Qualifications

5+ years of hands-on experience designing, building and operating production Azure environments

Expert-level Terraform: you have owned large multi-environment, multi-subscription Azure codebases, designed their code and state structure, and carried out major refactors and state migrations on live infrastructure

Proven experience designing CI/CD systems for both applications and infrastructure on Azure DevOps, GitHub Actions or comparable platforms, across many repositories and environments

Strong Linux systems administration background, with a deep understanding of how servers are provisioned, configured and run, and hands-on troubleshooting of services, containers, storage and networking at the OS level

Fluency in Bash and PowerShell; Python is a plus

Deep understanding of Microsoft Entra ID and of identity protocols such as OIDC, OAuth 2.0 and SAML, and of Azure’s control-plane and data-plane authorization models

Proven experience designing, implementing and testing high availability and disaster recovery for production systems, with a solid understanding of the SLAs and recovery limits of Azure services

Hands-on experience with Azure compute services such as Virtual Machines and VM Scale Sets, App Service and Container Apps

Experience building observability on Azure Monitor, Log Analytics and Application Insights, and fluency in KQL