Senior DevOps / Platform Engineer (Azure)

Senior DevOps / Platform Engineer (Azure)Type: Remote ContractLocation: United States (US work authorization required)Openings: 2 positions, including 1 Platform LeadStart Date: Around December 1, 2026Duration: Multi-month engagement, with potential extensionAbout VirtasantVirtasant is a global technology services company with a network of over 4,000 technology professionals across 130+ countries. We specialize in cloud architecture, infrastructure, migration, and optimization, helping enterprises scale efficiently while maintaining cost control.Our clients range from Fortune 500 companies to fast-growing startups, relying on us to build high-performance infrastructure, optimize cloud environments, and enable continuous delivery at scale.About the roleWe are building a senior engineering team for a large enterprise program in healthcare operations and workforce decisioning. The platform helps operations leaders understand what is happening across their workforce, make informed decisions, take action within the enterprise systems they already use, and measure the results.We are looking for two Senior DevOps / Platform Engineers, including one Platform Lead, to design, build, secure, and operate the production infrastructure supporting this platform.The environment will run within the client's own Azure tenant, handle regulated workforce and operational data, and support isolated production deployments for individual customers.This is a hands-on engineering role requiring deep Azure expertise, infrastructure as code, cloud security, and production platform ownership. You will establish the initial build environment, develop the production infrastructure, and implement the automation, security controls, observability, and disaster recovery capabilities needed to operate a reliable enterprise platform.For the Platform Lead position, you will also own key architectural decisions, establish engineering standards, and work directly with the client's architects and security teams.What You'll DoDesign, build, and maintain production Azure infrastructure, including subscriptions, landing zones, private networking, managed identities, Azure Key Vault, and Azure Monitor.Develop and maintain infrastructure as code using Terraform or Bicep, creating reusable modules and automated provisioning processes.Establish the initial build and development environments, followed by secure, production-ready infrastructure within the client's Azure tenant.Design and implement isolated customer deployments, ensuring strict separation of subscriptions, networking, encryption keys, and data stores.Build repeatable infrastructure deployment processes that allow new customer environments to be provisioned consistently and efficiently.Implement secure identity and access management using Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time access, and break-glass procedures.Design and maintain secure CI/CD pipelines using client-controlled repositories and runners, including automated testing, security scanning, approval workflows, and controlled production releases.Implement cloud security controls and support enterprise security assessments, penetration testing, compliance reviews, and vulnerability remediation.Build observability capabilities across customer deployments, including centralized logging, metrics, distributed tracing, alerting, and integration with enterprise SIEM platforms.Design and implement resilient infrastructure, backup strategies, zone redundancy, and disaster recovery solutions, including secondary-region failover capabilities.Define recovery objectives, conduct disaster recovery and performance testing, and document results and remediation actions.Collaborate with application engineers, security teams, enterprise architects, and client stakeholders to ensure infrastructure meets operational, security, and performance requirements.Develop operational runbooks, infrastructure documentation, and incident response procedures.Participate in production on-call rotations, incident troubleshooting, and post-deployment hypercare.Take ownership of infrastructure throughout its lifecycle, from architecture and implementation through production deployment, monitoring, troubleshooting, and continuous improvement.For the Platform Lead position, guide technical architecture, establish platform engineering standards, coordinate engineering activities, and represent the team in client architecture and security discussions.What We're Looking ForMust-Have ExperienceSenior Azure platform engineering experience. You have designed, built, and operated production Azure environments end to end, including subscriptions, landing zones, private networking, managed identities, Key Vault, and Azure Monitor. You have personally implemented infrastructure rather than only maintaining environments designed by others.Infrastructure as code. Strong hands-on experience with Terraform or Bicep, including reusable infrastructure modules, automated provisioning, configuration management, and infrastructure lifecycle ownership.Security and regulated environments. You have built production platforms handling PHI or similarly sensitive data and successfully supported HIPAA, SOC 2, or comparable enterprise security reviews. You have participated in penetration testing, addressed security findings, and produced technical evidence for compliance assessments.Identity and secrets management. Strong experience with Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time and break-glass access, credential rotation, and secure secrets management. You understand how to eliminate long-lived credentials from pipelines and repositories.Multi-tenant infrastructure architecture. You have designed and operated customer-isolated environments with separate networking, encryption keys, and data stores. You can automate repeatable customer deployments while maintaining strict security boundaries.Secure CI/CD engineering. Experience building production deployment pipelines within enterprise-controlled environments, including secure runners, environment promotion, approval workflows, container and dependency scanning, and coordinated releases across multiple deployments.Disaster recovery and resilience. Hands-on experience implementing backup strategies, zone-redundant infrastructure, secondary-region recovery environments, and documented RTO/RPO objectives. You have personally executed and validated production disaster recovery or failover tests.Observability and production operations. Strong experience implementing logging, metrics, tracing, alerting, security event monitoring, and performance testing. You can troubleshoot production issues, identify bottlenecks, and participate in on-call support.Technical ownership and stakeholder communication. You can independently own complex infrastructure initiatives, explain architectural decisions to enterprise architects and security reviewers, and document operational procedures and technical trade-offs.Strong English communication. You are fluent in written and spoken English and comfortable collaborating directly with US-based engineers, enterprise architects, security teams, and client stakeholders.US location and work authorization. You must be based in the United States and authorized to work in the US. Occasional domestic travel may be required.Available around December 1, 2026.Additional requirement for the Platform Lead: Previous experience leading a small platform engineering team, establishing technical standards, owning architectural decisions, and representing infrastructure designs in enterprise client discussions.Nice-to-havesHealthcare technology experience, particularly provider, payer, workforce management, or other regulated healthcare platforms.Snowflake administration, including customer-specific environments, private connectivity, customer-managed encryption keys, replication, and failover.Experience operating graph databases such as Neo4j in production, including clustering, encryption, backup, and patching.Experience deploying and supporting Azure AI Foundry or Azure OpenAI, including regional data controls and infrastructure for AI applications.Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, or equivalent security monitoring and governance tools.Experience with Azure Kubernetes Service (AKS) or Azure Container Apps for production containerized workloads.Experience using AI-assisted development tools to accelerate infrastructure automation, scripting, and CI/CD engineering.Experience supporting enterprise platforms with strict security, availability, and customer isolation requirements.Our recruitment processRecruiter interview (30 min)Technical interview (30 min)Client interview (45 min)We strive to move efficiently from step to step to make the recruitment process as fast as possible.