Systems Architect

Mandatory Skills

• Azure DevOps Platform Administration
  
  

Design and configure Azure DevOps Organizations, Projects, Teams, and Process Templates.

Configure platform components including Repositories, Pipelines, Artifacts, Environments, Libraries, and Variable Groups.

Define enterprise project structure, naming conventions, and platform standards.

Configure retention policies, auditing, and governance.

• Azure DevOps Security & Identity (Entra ID/RBAC)
  
  

Integrate Azure DevOps with Microsoft Entra ID.

Design RBAC and security group strategy.

Configure project, repository, pipeline, and environment permissions.

Implement least privilege access and segregation of duties

Manage service accounts, PAT policies, and service principals

• Agent Infrastructure Design & Administration
  
  

Design and administer Microsoft-hosted and self-hosted agent pools.

Define agent architecture, sizing, scaling, and maintenance approach.

Troubleshoot agent connectivity and performance issues.

• Service Connections & Secrets Management
  
  

Configure Azure DevOps Service Connections.

Integrate with Azure Key Vault.

Configure secure authentication using Service Principals/Managed Identity.

Manage secrets, certificates, and secure variables.

• Azure DevOps Pipeline Platform Administration
  
  

(Platform configuration only, not application pipeline development)

Configure Environments, approvals, checks, and permissions.

Manage shared pipeline resources, Variable Groups, and Secure Files.

Define pipeline governance standards.

• Platform Governance & Standards
  
  

Define Azure DevOps operating model and governance framework.

Establish Standards For

Project organization

Naming conventions

Repository structure

Access management

Environment governance

Approval workflows

Define onboarding standards

• Automation & Infrastructure as Code
  
  

Automate Azure DevOps configuration using Terraform, Azure CLI, PowerShell, or REST APIs.

Automate creation of Projects, Agent Pools, Service Connections, Variable Groups, and security configurations.