Cloud Infrastructure & DevOps Engineer

Karachi, Sindh, Pakistan

Full Time

Experienced

Cloud Infrastructure & DevOps Engineer

Experience Required: Min 3 Years
Full-Time Job

Role Summary
We are seeking a Cloud Infrastructure & DevOps Engineer to support and administer enterprise cloud platforms hosted on Microsoft Azure. This is primarily a cloud administration and operations role, focused on operating, maintaining, monitoring, and supporting an existing cloud platform rather than designing or building new platform components. The role includes Terraform-based infrastructure support, GitHub Enterprise Server (GHES) administration, CI/CD operations, cloud networking, identity management, monitoring, and release execution.

Key Responsibilities

· Administer Citadel Platform and AI Application Landing Zones, including Azure subscriptions, resource groups, networking, identity, RBAC, policies, Key Vault/secrets, monitoring and cost controls.

· Own Terraform-based Infrastructure as Code: maintain modules, providers, variables, state/backends, workspaces, plan/apply workflows, drift detection and remediation.

· Operate CI/CD pipelines on GitHub Enterprise Server (GHES), including workflows and self-hosted runners; support Azure DevOps integration where applicable.

· Ensure infrastructure and configuration changes are version-controlled and deployed through approved CI/CD processes rather than manual portal changes.

· Monitor platform health, availability, capacity, security alerts and integration failures; support incident triage, RCA inputs and recurring problem tracking.

· Execute controlled releases, deployment verification and rollback procedures in line with approved change-management processes.

· Troubleshoot network, identity, API, data-access and connectivity issues across Azure, GCP and on-premise dependencies.

· Maintain operational runbooks, deployment checklists, configuration/environment inventories and handover documentation; conduct knowledge transfer.

Must-Have Skills

Minimum 3 years of hands-on Microsoft Azure administration and operations experience.
Experience supporting and operating enterprise Azure environments.
Strong hands-on experience with Terraform and Infrastructure as Code (IaC).
Experience with GitHub Enterprise Server (GHES), GitHub Actions, and self-hosted runners.
Experience supporting and maintaining CI/CD pipelines.
Strong understanding of Azure services, subscriptions, resource groups, and landing zones.
Experience with Azure networking, including VNETs, DNS, routing, load balancers, and firewalls.
Knowledge of IAM, RBAC, Policy Management, and Secrets Management.
Experience with monitoring, logging, and alerting solutions.
Scripting skills in PowerShell, Bash, or Python.
Experience in release execution, deployment support, and rollback activities.
Strong operational support and troubleshooting experience.

Good-to-Have Skills

Experience with Docker, Kubernetes, or OpenShift.
Exposure to DevSecOps, security scanning, and policy-as-code.
Experience with Azure Landing Zones and cloud governance frameworks.
Knowledge of Azure Monitor, Log Analytics, Prometheus, Grafana, or ELK/OpenSearch.
Experience with Terraform Cloud/Enterprise.
Familiarity with ServiceNow and ITSM processes.
Experience working in regulated or enterprise environments.
Knowledge of backup, disaster recovery, and high-availability solutions.

Required Experience & Skills

· 3-10 years hands-on Azure administration/operations experience in a production environment.

· Strong Azure Landing Zones, hub-spoke networking, Azure Monitor, Log Analytics, Azure Policy, RBAC, Key Vault and cloud cost-control knowledge.

· Mandatory hands-on Terraform expertise: module design, state/backend management, plan/apply workflows and drift remediation.

· Strong GitHub Enterprise Server (GHES), GitHub Actions/workflows, self-hosted runners and pipeline-driven Terraform deployment experience.

· Experience with release management, rollback planning, monitoring, incident/problem management and operational documentation.

· Working knowledge of APIM/API gateways, REST APIs, event streaming and cross-cloud/on-premise connectivity.

Preferred Certifications

Strongly preferred: Microsoft Azure Administrator Associate (AZ-104). Additional preferred certifications: Azure DevOps Engineer Expert (AZ-400), HashiCorp Terraform Associate, GitHub Actions, Azure Security Engineer Associate (AZ-500) or Identity and Access Administrator (SC-300). Google Cloud Associate Cloud Engineer is an advantage.

Key Deliverables

Operational runbooks; environment/configuration inventory; monitoring and incident register; current IaC/CI-CD repository; deployment/rollback procedures; knowledge-transfer and handover pack.

Apply for this position

Required*

// GTM Values For A/B Testing var EXP1_TWO_STAGE_APPLY_ENABLED = false; var EXP1_TWO_STAGE_APPLY_CHOSEN = false; window.resumeRequired = true;

First Name*

Last Name*

Email Address*

Phone*

Resume*

We've received your resume. Click here to update it.

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

Are you willing to relocate*

What is your total professional experience*

How many years of relevant experience do you have for this position*

What is your current location (City and Country)*

What is your nationality*

What is your current employment status*

What is your current designation and company name*

What are your key technical skills and areas of expertise*

What is your current monthly salary
Please mention the amount and currency.*

What is your expected monthly salary
Please mention the amount and currency.*

What is your current notice period or earliest availability to join*

Do you have a valid work visa or work permit for the project country*

Are you willing to relocate if required*

What is your proficiency level in English*

Please provide your contact number, including the country code.*

Human Check*

Submit Application

// Define Google Tag Manager script function runGoogleTagManagerScript() const gtmScript = document.createElement(script); gtmScript.async = true; gtmScript.src = https://www.googletagmanager.com/gtm.jsid=GTM-H9NR; const firstScript = document.getElementsByTagName(script)[0]; firstScript.parentNode.insertBefore(gtmScript,firstScript); // Set tracking consent to denied by default window.dataLayer = window.dataLayer || []; function gtag() dataLayer.push(arguments); gtag(consent, default, ad_user_data: denied, ad_personalization: denied, ad_storage: denied, analytics_storage: denied, wait_for_update: 500, ); dataLayer.push(gtm.start: new Date().getTime(), event: gtm.js); window.googleTagManager = window.dataLayer; // If consent has already been granted, load Google Tag Manager if (localStorage.getItem(trackingConsentGranted) === true) runGoogleTagManagerScript(); function grantConsent() // Store tracking consent preference and push update to Google Tag Manager localStorage.setItem(trackingConsentGranted, true); function gtag() googleTagManager.push(arguments); gtag(consent, update, ad_user_data: granted, ad_personalization: granted, ad_storage: granted, analytics_storage: granted ); // Load Google Tag Manager runGoogleTagManagerScript(); function denyConsent() // Store tracking consent preference and do not load Google Tag Manager localStorage.setItem(trackingConsentGranted, false); $([data-track-share-click]).click(function () googleTagManager.push( event: gaEvent, eventCategory: Share Job, eventAction: Click, eventLabel: $(this).data(track-share-click) + Share ); ); function initializeGainsightPX() // Get current page URL var currentURL = window.location.href; // Check if URL contains /apply/confirm/ if (currentURL.includes(/apply/confirm/)) return; // Exit function, do not proceed with initialization // Check to see if user id exists in sample population loading Gainsight PX var sessionID = 26d6eac99ecc879c0a3fc3e01d6f3d0c; var visitorType = guest; var samplePercentage = 1; var accountId = customer_20251001122918_1W8DYZ8Z8LE8DASA; var accountName = datamaticstechnologies; // Format signUpDate as YYYY/MM/DD const today = new Date(); const signUpDate = today.getFullYear() + / + String(today.getMonth() + 1).padStart(2, 0) + / + String(today.getDate()).padStart(2, 0); if (visitorType !== guest || __IdSampler.isIdInSamplePopulation(sessionID, samplePercentage)) // Load Gainsight Script (function (n, t, a, e) let i = aptrinsic; n[i] = n[i] || function () (n[i].q = n[i].q || []).push(arguments); ; n[i].p = e; let r = t.createElement(script); r.async = true; r.src = a + a= + e; let c = t.getElementsByTagName(script)[0]; c.parentNode.insertBefore(r, c); )(window, document, https://web-sdk.aptrinsic.com/api/aptrinsic.js, AP-D0FHNVQROUMO-2); // Send custom attributes including Account ID and Account Name aptrinsic(identify, id: sessionID, role: Visitor, signUpDate: signUpDate , id: accountId, name: accountName ); // Initialize Gainsight PX if the URL condition is met initializeGainsightPX(); window.NREUM||(NREUM=);NREUM.info=beacon:bam.nr-data.net,licenseKey:7232591015,applicationID:29127175,transactionName:ZAcBYxEEXxICBkVRDV1NIEIQEV4MTARBSA5KTRNYEAxFCAwL,queueTime:0,applicationTime:58,atts:SEAWFVkeTE1BBBMCGU4f,errorBeacon:bam.nr-data.net,agent:'

Cloud Infrastructure & DevOps Engineer - Datamatics Technologies - Career Page