Osborn & Holloway is seeking a Senior Azure AI Application Platform & DevSecOps Engineer to design and build a governed internal AI application incubation platform in Microsoft Azure. The role focuses on automating Azure provisioning, security and governance guardrails, DevSecOps and application lifecycle processes, and integrations that let business users create applications safely.

Responsibilities:

Design the Azure architecture supporting the application incubation environment
Develop approved deployment patterns for common categories of internally generated web applications
Automate provisioning and configuration of Azure resources required by generated applications
Establish appropriate patterns for Resource Groups, application hosting, storage, databases, APIs, identities, networking, monitoring, and supporting services
Develop reusable infrastructure components using Infrastructure as Code
Use Bicep, Terraform, or other approved technologies to make infrastructure provisioning repeatable and auditable
Establish naming, tagging, ownership, lifecycle, and cost-management standards for generated resources
Design secure authentication and authorization patterns using Microsoft Entra ID
Automate appropriate use of managed identities, app registrations, service principals, and RBAC
Establish automated Key Vault and secrets-management patterns
Prevent generated applications from adopting unsafe credential, secret-storage, or access-control practices
Incorporate Azure Policy and other governance mechanisms into the incubation environment
Establish appropriate security scanning, package/dependency validation, and code-quality controls
Collaborate with security and infrastructure stakeholders to define boundaries within which citizen-generated applications may operate
Design technical controls that prevent generated applications from bypassing required governance
Design automated source-control and CI/CD patterns for generated applications
Integrate the platform with Azure DevOps repositories, work items, pipelines, and release processes
Establish standardized DEV, test/UAT, and production deployment patterns
Build automated quality, security, and approval gates into application promotion
Ensure generated applications remain traceable, supportable, and recoverable
Develop rollback, backup, monitoring, logging, and operational-support patterns
Automate creation of appropriate deployment and operational documentation
Establish lifecycle processes for application ownership transfer, retirement, and resource decommissioning
Work with the AI Application Platform Engineer to translate enterprise engineering standards into automated platform rules
Define which architectural decisions may safely be made automatically and which require human review
Establish thresholds that determine when a self-service application must “graduate” into formal architecture, security, engineering, or governance review
Consider factors including data sensitivity, regulatory implications, external exposure, integration complexity, transaction volume, business criticality, and user population
Build mechanisms that prevent an application from progressing when required controls have not been satisfied
Ensure the platform can explain why an application has been stopped, escalated, or routed for additional review
Maintain sufficient full-stack development capability to understand and troubleshoot applications produced by the incubation platform
Develop APIs and platform services required to connect AI orchestration, application generation, Azure provisioning, and DevOps automation
Collaborate on reusable application components and architectural templates
Support integrations with approved Microsoft enterprise services and business systems
Participate directly in troubleshooting generated applications when failures span application, infrastructure, identity, security, or deployment boundaries

Requirements:

Significant professional experience with Microsoft Azure architecture and engineering
Strong understanding of Azure identity, security, networking, compute, storage, application hosting, and data services
Hands-on experience with Microsoft Entra ID, RBAC, managed identities, app registrations, and enterprise authentication patterns
Experience with Azure Key Vault and secure secrets-management practices
Strong Infrastructure-as-Code experience using Bicep, Terraform, or comparable technologies
Strong Azure DevOps experience, including repositories, pipelines, and application lifecycle management
Practical experience designing CI/CD and DevSecOps processes
Working full-stack development knowledge sufficient to understand modern web applications, APIs, databases, and application architecture
Strong understanding of SDLC, environment management, testing, release management, and production-support principles
Familiarity with Agile development methodologies
Strong written and verbal English communication skills
Ability to work independently while collaborating closely with another senior engineer across overlapping areas of responsibility
Relevant Microsoft Azure certifications
Experience with Azure OpenAI or AI-enabled application platforms
Experience developing internal developer platforms, application factories, self-service provisioning systems, or Platform Engineering capabilities
Experience with Azure Policy and enterprise cloud governance
Experience with Microsoft Power Platform, Dataverse, Power Automate, or other low-code/no-code technologies
Experience with application observability, Application Insights, Log Analytics, and automated operational monitoring
Experience designing systems in regulated, healthcare, financial, or other security-conscious environments
Experience with secure software supply-chain practices and automated vulnerability management
Familiarity with FinOps and cloud cost-governance principles

Senior Security on Prem/cloud Engineer

About this role