Senior DevOps (Azure)

You’ll be joining a cloud platform modernization project focused on migrating legacy and retained services onto a new Azure-based platform built around AKS, Terraform, Helm, and Azure DevOps. The project involves moving live services and CI/CD pipelines to a standardized, reusable platform while decommissioning obsolete infrastructure.

This is a hands-on opportunity to work on a large-scale cloud environment, covering infrastructure automation, Kubernetes, networking, security, CI/CD, and cloud cost optimization. You’ll work closely with DevOps and engineering teams throughout the full project lifecycle, from migration and platform changes to troubleshooting, optimization, and operational handover.

Our client is a global IT services and managed services provider specializing in cloud infrastructure, IT consulting, and supporting mission-critical enterprise environments.

Key responsibilities

• Porting legacy and retained services onto the new AKS clusters and subscriptions, and moving their CI/CD pipelines into the new Azure DevOps project using shared pipeline templates

• Extending Terraform across multiple IaC layers, including compute, infrastructure, hub, global infrastructure, and monitoring

• Creating and maintaining Helm charts for individual services

• Implementing traffic-routing changes to move internal calls away from Cloudflare, including adjustments to Front Door, WAF, firewall, DNS, and origin configuration

• Safely decommissioning obsolete infrastructure while maintaining awareness of Terraform state and dependencies

• Right-sizing and optimizing Cosmos DB and Redis, including throughput/RU, tiers, scaling, cost, and overall performance

• Contributing to security hardening across the platform

• Maintaining healthy and reliable CI/CD pipelines

• Handling general infrastructure work across the platform, including day-to-day platform engineering, provisioning, configuration changes, drift remediation, backlog items, and BAU tickets

• Supporting other teams in onboarding their services onto the platform

• Creating clear runbooks and handover documentation to enable SRE teams to operate and maintain the delivered solutions

Ideal candidate profile

• Terraform: strong experience with modules, workspaces, remote azurerm state, and multi-environment/multi-region tfvars

• Azure: hands-on experience with hub-and-spoke landing zones, AKS, Front Door, Application Gateway + WAF, Azure Firewall, APIM, VNets, Private Endpoints, Key Vault, Managed/Workload Identity, and RBAC

• Kubernetes & Helm: experience authoring and maintaining Helm charts, working with deployments, services and ingress, workload identity, resource requests/limits, scaling, and troubleshooting cluster workloads

• Networking & security: experience with Front Door and WAF policies, firewall rule design, DNS, origins and routing, TLS, and specifically migrating traffic from Cloudflare to Azure-native edge services

• CI/CD: strong Azure DevOps Pipelines experience, with an understanding of thin pipelines that delegate build and deployment logic to a task runner such as Make, Task, or an equivalent solution, keeping the logic portable and testable outside CI; experience integrating security scanning into CI/CD pipelines

• Cost & scaling: demonstrable experience with right-sizing and optimizing Cosmos DB, including RU/autoscale, and Redis, including tier selection and clustering, as well as general Azure cost awareness

• Migration: proven experience moving live services between subscriptions, clusters, or Azure DevOps projects with minimal downtime and well-planned cutover and rollback procedures

• Ways of working: strong Git-based trunk/PR workflows, Infrastructure as Code code reviews, clear technical documentation, and the ability to work independently in a senior contract capacity

• English: B2 level or higher

Conditions

• Rate: 150–180 PLN net/h

• Full-time B2B contract

• 100% remote work

• Location: Poland

• English: B2 / fluent

• Benefits: Private medical care, Multisport card, life insurance

• Start: ASAP

Recruitment steps

• Initial call with HR

• 15–30 min screening call with a team member or Team Lead

• Final technical interview, potentially including a coding/whiteboard task

• Discussion focused on practical technical knowledge and previous projects

W KUBO naprawdę zależy nam na ludziach. Zapraszamy osoby w różnym wieku, o różnych tożsamościach
i sposobach funkcjonowania oraz niezależnie od sytuacji zdrowotnej i rodzinnej. Autentyczność jest dla nas wartością, a naszym celem jest uczciwy i otwarty proces dla wszystkich.

At KUBO, we genuinely care about people. We welcome candidates of all ages, backgrounds, identities, family constellations, health situations, and ways of thinking and interacting with the world. You’re welcome to be yourself — we value authenticity, and we’re committed to creating a fair and inclusive process for everyone.