وصف الوظيفة
Role Overview
DevOps Engineer at DeepLight, a specialist AI and data consultancy. The role is based in the Azure UAE environment, operating at a Mid-level capacity within the AI Centre of Excellence (AICoE).
Company Overview
DeepLight AI is a specialist AI and data consultancy with extensive experience implementing intelligent enterprise systems across multiple industries, with particular depth in financial services and banking. The team combines deep expertise in data science, statistical modeling, AI/ML technologies, workflow automation, and systems integration with a practical understanding of complex business operations. DeepLight delivers tailored AI solutions designed to integrate seamlessly into existing enterprise architectures, ensuring that innovation is both scalable and secure.
Role Purpose
Own the Agentic Workflow Automation (AWA) platform's deployment architecture, infrastructure-as-code, CI/CD pipelines, and continuous operational reliability. Serve as the primary guardian of the cloud-native infrastructure within the bank's Azure UAE environment, ensuring that every critical platform component is entirely automated, secure, and reproducible strictly from code, eliminating manual interventions.
Key Responsibilities
Infrastructure and Code Management
- Maintain and govern all AWA Azure infrastructure utilizing Terraform or Bicep, covering multi-namespace AKS clusters, ADLS Gen2 accounts with WORM policies, API Management configurations, private endpoints, and Key Vault instances.
- Construct complex KQL queries and alerting conditions within Azure Monitor and Log Analytics to track service-level SLA breaches, runtime failures, and token utilization thresholds.
CI/CD and Deployment
- Design and optimize automated Azure DevOps pipelines managing the full lifecycle from container compilation, ACR pushing, and Notary v2 image signing, through to managed infrastructure deployments and validation testing gates.
Kubernetes and Container Management
- Manage multi-namespace AKS clusters, enforcing strict network policies, pod isolation, workload identities, and KEDA autoscaling rules based on active message queues or consumer lag.
- Oversee container registries, enforce mandatory image signing, monitor vulnerability tracking outputs, and maintain admission control validation policies via OPA Gatekeeper.
Access and Security
- Administer access architectures, managed identity configurations, automated TLS certificate lifecycles, and cryptographic secret rotation schedules within Azure Key Vault.
- Implement platform security configurations, manage private connectivity endpoints, Azure Policy enforcement rules, and enterprise firewall architectures.
Disaster Recovery
- Define, implement, and validate automated disaster recovery failover paths, maintaining target Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for storage accounts and model serving endpoints.
Qualifications & Experience
- Minimum 5 years of experience in dedicated DevOps, SRE, or Platform Engineering roles.
- At least 2 years explicitly focused on Azure ecosystems.
- Documented history managing production Kubernetes deployments, implementing automated RBAC, policy layers, and namespace segmentation.
- Bachelor's degree in Computer Science, Systems Engineering, or a related technical discipline.
Skills & Competencies
- Deep competence in building enterprise-grade, production-ready cloud architectures using infrastructure-as-code platforms (Terraform or Bicep).
- Technical mastery over Kubernetes (AKS) configuration, including Helm/Kustomize deployment engines, network policies, and cluster admission controls.
- Practical ability to implement automated horizontal scaling strategies using Kubernetes Event-Driven Autoscaling (KEDA) or equivalent streaming metrics.
- Capability to manage multi-stage, gated deployment pipelines across multi-environment setups using Azure DevOps or GitHub Actions.
- Solid understanding of enterprise network routing, including hub-and-spoke VNets, private link endpoints, network security groups, and cloud firewall boundaries.
- Proficiency writing advanced KQL (Kusto Query Language) expressions to parse logs and feed operational dashboards.
- Proficiency with Kubernetes Workload Identity, managed identity architectures, and Azure Key Vault access security profiles.
- Familiarity with Azure AI Foundry and API Management platforms, specifically controlling token consumption quotas, routing, and rate limits.
- Familiarity with Azure Event Hubs or Kafka consumer groups, alongside immutable ADLS Gen2 storage structure management.
Certifications
- Active Azure Administrator Associate (AZ-104), Azure DevOps Engineer Expert (AZ-400), or Certified Kubernetes Administrator (CKA) designations are desirable.
Additional Information
- Competitive salary.
- Comprehensive personal health insurance.
- Visa Sponsorship for the successful individual.
- Professional development and certification support.
- Subscription reimbursement relating to your role.
- Opportunity to work on cutting-edge AI projects.
- Monthly Employee Incentive program.
- Career advancement opportunities in a rapidly growing AI company.