Azure Cloud Infrastructure Platform Engineer - AKS, DevOps

Job Description

"

Location:

Toronto

Experience:

4-6 years

Required Skills:

Digital:
Cloud Dev Ops

Digital:
Cloud Security Management

Digital:
Microsoft Azure

Digital:
Terraform

Application Server Deployment & Administration

Essential

Skills:

Release and Post production Maintenance Server Creation, Patching, scripting Proficiency in CICD tools and pipelines IaC tools like Terraform Monitoring and Observability tools method Containerization of applications using docker and Kubernetes Certificate Secrets and keys management Compliance of Infrastructure resources to the security standards Database creation and connectivity management

Platform Infrastructure Design, implement, and maintain AKS clusters (multi-tenant or workload-isolated), including Node pools, autoscaling (cluster HPA), taints tolerations, and resource quotas.

Networking Azure CNI, Cilium Calico policies, private clusters, VNet peering, Private Link, and egress controls.

Storage Azure Managed Disks, Azure Files, BlobS3-compatible, CSI drivers. Build scalable, reusable Terraform modules for AKS, Azure Container Registry (ACR), Azure Key Vault, Application Gateway Ingress Controller (AGIC), Azure Front Door, Azure Monitor, Log Analytics, Azure DNS, Virtual Networks, Private Endpoints, and RBAC.

Implement Git Ops (e.g., FluxCD or Argo CD) for Kubernetes resource reconciliation and progressive delivery.

CICD Automation Own CICD pipeline design and governance using Azure Dev Ops, Git Hub Actions, or similar

Build test package stages image signing attestation (e.g., cosign

SBOM)

Automated environment provisioning via Terraform and Workload Identity OIDC for secretless auth

Progressive rollout strategies (blue green, canary) and automated rollbacks. Write automation (Bash, Python, Power Shell) to reduce toil and codify runbooks.

Security Compliance Establish and enforce policy-as-code (e.g., OPAGatekeeper, Kyverno) and Azure Policy.

Integrate Key Vault and Secrets Store CSI rotate secrets certificates. Container and image security ACR Tasks, vulnerability scanning (e.g., Trivy Defender for Cloud), Pod Security standards, Network Policies. Implement least-privilege RBAC across Azure and Kubernetes manage Managed Identities and Workload Identity.

Observability SRE Configure Azure Monitor, Log Analytics, and Prometheus, Grafana stacks define SLOs SLIs.

Build dashboards, alerts, and runbooks for incident response and on-call readiness. Performance and cost optimization (e.g., rightsizing node pools, spot nodes, autoscaling policies, image caching)."

Requirements
Experience (Years): 4-6 Essential

Skills:

• Work with project teams throughout the organization to design, implement, and manage CDN infrastructure using Akamai, to ensure high availability, performance, and scalability for customer facing applications and business processes.
• Handle multiple priorities and assignments with excellence and precision.
• Be a part of a 24/7/365 organization (some after hours support is expected as part of normal on-call rotation).
• Directly support line of business development teams, provide guidance to them on implementation and changes for customer facing applications
• Develop and maintain security protocols and measures to protect CDN infrastructure from cyber threats.
• Monitor and analyze network performance, identifying and resolving issues to optimize content delivery of critical applications.
• Collaborate with cross-functional teams to integrate Akamai CDN solutions with existing systems and applications.
• Collaborate with information security teams to implement DDoS protection strategies and other security measures in the CDN.
• Provide technical support and guidance to clients and internal teams regarding CDN and security best practices.
• Work closely with vendor and professional service teams on delivery related activities and strategy.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field. OR similar work experience.
• Strong understanding of network protocols (HTTP/HTTPS, DNS, TCP/IP).
• Proven experience as a CDN Engineer or similar role, with a strong focus on cybersecurity.
• In-depth knowledge of Content Delivery Network technologies, including caching, load balancing, and content optimization.
• Excellent problem-solving skills and attention to detail.
• Strong communication and teamwork abilities.
• Experience supporting 24/7/365 customer facing applications at enterprise scale.
• Awareness and experience with cybersecurity tools and practices, such as firewalls, intrusion detection/prevention systems, and encryption.
• Proficiency in scripting and automation (e.g., Python, Bash) a plus.
• Relevant certifications (e.g., CISSP, CEH) are a plus but not required.