Senior Azure Platform / DevOps Engineer

Makai Labs builds and operates cloud platforms for its clients. The Senior Azure Platform / DevOps Engineer designs, builds, and maintains Azure platforms, including reusable Terraform foundations, and supports clients with architecture decisions, migrations, and platform operations.

Responsibilities:

• Stand up new platforms from scratch: network, compute, data, and the pipeline to ship to them
• Make the architecture calls and live with them. That includes knowing when a Terraform change is a safe in-place update and when it's a destroy-and-replace you should never run blind against production
• Run migrations that carry real risk. Move a live platform onto a new foundation, read the plan correctly, write the runbook, and have a rollback ready before you start
• Keep platforms healthy over time: provider upgrades, drift, security, and not letting a shared foundation rot as more clients land on it
• Work directly with the client's own DevOps engineers. Often they're the ones running the apply and you're advising, so you need to explain a plan, unblock a failure quickly, and be someone the engineer holding the keys trusts

Requirements:

• Azure experience is the hard requirement
• You've built and run production Azure yourself, not just used modules someone else wrote
• Azure networking is where most of the work lives: VNets and subnets, private endpoints and private DNS zones, NSGs and UDRs, NAT, Application Gateway and WAF, load balancers, and hub-and-spoke / Virtual WAN
• Terraform on Azure, with state treated as something you respect: workspaces, migrations, imports, remote backends, and the discipline not to force an apply through a lifecycle guard
• The delivery path: Azure Container Registry, VM Scale Sets and cloud-init, and CI/CD with Azure DevOps or GitHub
• Azure data services: Postgres Flexible Server, managed Redis, Blob storage, and a real sense of their sizing, failover, and cutover risks
• Entra ID and RBAC: app registrations, service principals, role assignments scoped properly across subscriptions
• Clear writing and a level head on a live call. You can hand someone a runbook they can follow without you in the room
• Candidates must be authorized to work in the US. No visa sponsorship is available for this position
• Azure certs (AZ-104, AZ-305)
• Temporal or similar workflow runtimes, and scripting (Bash, Python) for the glue
• Past consulting or client-embedded work. You've been the outside expert before