Senior DevOps (Azure)

You’ll be joining a cloud platform modernization project focused on migrating legacy and retained services onto a new Azure-based platform built around AKS, Terraform, Helm, and Azure DevOps. The project involves moving live services and CI/CD pipelines to a standardized, reusable platform while decommissioning obsolete infrastructure. This is a hands-on opportunity to work on a large-scale cloud environment, covering infrastructure automation, Kubernetes, networking, security, CI/CD, and cloud cost optimization. You’ll work closely with DevOps and engineering teams throughout the full project lifecycle, from migration and platform changes to troubleshooting, optimization, and operational handover. Our client is a global IT services and managed services provider specializing in cloud infrastructure, IT consulting, and supporting mission-critical enterprise environments. Key responsibilities Porting legacy and retained services onto the new AKS clusters and subscriptions, and moving their CI/CD pipelines into the new Azure DevOps project using shared pipeline templates Extending Terraform across multiple IaC layers, including compute, infrastructure, hub, global infrastructure, and monitoring Creating and maintaining Helm charts for individual services Implementing traffic-routing changes to move internal calls away from Cloudflare, including adjustments to Front Door, WAF, firewall, DNS, and origin configuration Safely decommissioning obsolete infrastructure while maintaining awareness of Terraform state and dependencies Right-sizing and optimizing Cosmos DB and Redis, including throughput/RU, tiers, scaling, cost, and overall performance Contributing to security hardening across the platform Maintaining healthy and reliable CI/CD pipelines Handling general infrastructure work across the platform, including day-to-day platform engineering, provisioning, configuration changes, drift remediation, backlog items, and BAU tickets Supporting other teams in onboarding their services onto the platform Creating clear runbooks and handover documentation to enable SRE teams to operate and maintain the delivered solutions Ideal candidate profile Terraform: strong experience with modules, workspaces, remote azurerm state, and multi-environment/multi-region tfvars Azure: hands-on experience with hub-and-spoke landing zones, AKS, Front Door, Application Gateway + WAF, Azure Firewall, APIM, VNets, Private Endpoints, Key Vault, Managed/Workload Identity, and RBAC Kubernetes & Helm: experience authoring and maintaining Helm charts, working with deployments, services and ingress, workload identity, resource requests/limits, scaling, and troubleshooting cluster workloads Networking & security: experience with Front Door and WAF policies, firewall rule design, DNS, origins and routing, TLS, and specifically migrating traffic from Cloudflare to Azure-native edge services CI/CD: strong Azure DevOps Pipelines experience, with an understanding of thin pipelines that delegate build and deployment logic to a task runner such as Make, Task, or an equivalent solution, keeping the logic portable and testable outside CI; experience integrating security scanning into CI/CD pipelines Cost & scaling: demonstrable experience with right-sizing and optimizing Cosmos DB, including RU/autoscale, and Redis, including tier selection and clustering, as well as general Azure cost awareness Migration: proven experience moving live services between subscriptions, clusters, or Azure DevOps projects with minimal downtime and well-planned cutover and rollback procedures Ways of working: strong Git-based trunk/PR workflows, Infrastructure as Code code reviews, clear technical documentation, and the ability to work independently in a senior contract capacity English: B2 level or higher Conditions Rate: 150–180 PLN net/h Full-time B2B contract 100% remote work Location: Poland English: B2 / fluent Benefits: Private medical care, Multisport card, life insurance Start: ASAP Recruitment steps Initial call with HR 15–30 min screening call with a team member or Team Lead Final technical interview, potentially including a coding/whiteboard task Discussion focused on practical technical knowledge and previous projects W KUBO naprawdę zależy nam na ludziach. Zapraszamy osoby w różnym wieku, o różnych tożsamościach i sposobach funkcjonowania oraz niezależnie od sytuacji zdrowotnej i rodzinnej. Autentyczność jest dla nas wartością, a naszym celem jest uczciwy i otwarty proces dla wszystkich. At KUBO, we genuinely care about people. We welcome candidates of all ages, backgrounds, identities, family constellations, health situations, and ways of thinking and interacting with the world. You’re welcome to be yourself — we value authenticity, and we’re committed to creating a fair and inclusive process for everyone.