Senior DevOps Engineer Azure Infrastructure

Project overview

For our client in Frankfurt am Main, we are looking for a Senior DevOps Engineer (m/f/d) for Azure Infrastructure, starting immediately.

For the expected duration until 07/2027 with the option of extension. The client would like someone who is on-site in Frankfurt 2-3 days/week. The minimum requirement is staggered shifts (2-4 days on-site every three months), sprint shifts (2-3 days on-site every three weeks).

Content:

Development of an app aimed at young customers (m/f/d) of the banking group, combining investment and daily finance functions in a modern mobile application for iOS and Android. The product is currently in the development phase. Development takes place in interdisciplinary domain teams.

Responsibilities

• The DevOps Engineer is responsible for the entire Azure infrastructure (IaC with Bicep), Azure DevOps Pipelines, AKS cluster management, secrets management (Key Vault), and monitoring. Builds and maintains the CI/CD pipeline for all services including Mobile (Fastlane). Handles open architecture topics (Managed Identity, RBAC, Private Endpoints, Observability).

Requirements

MUST

Azure DevOps Pipelines

YAML Multi-Stage Pipelines, Environments, Approvals, Variable Groups

Azure Kubernetes Service (AKS)

Cluster setup, Namespaces, Helm, Ingress, HPA (Autoscaling)

Azure Bicep / IaC

Modularized Bicep templates for AKS, APIM, Event Hub, Key Vault, ACR

Azure Key Vault

Secrets management, Managed Identity integration, Rotation Policies

Container Registry (ACR)

Image Building, Tagging strategy, Vulnerability Scanning

SHOULD

Azure Monitor / Application Insights

Dashboards, Alerts, Log Analytics Queries

Networking (VNet, NSG, Private Endpoints)

Network segmentation for banking requirements

Managed Identity / RBAC

Service-to-service auth without secrets, Azure RBAC concepts

Fastlane iOS/Android

Mobile CI/CD pipeline for App Store submissions integrated

CAN

Azure Frontdoor / WAF

CDN, Global Load Balancing, Web Application Firewall

OpenTelemetry

Distributed tracing across all services

Soft Skills

• Proactive security awareness
• Willingness to document infrastructure
• Reliability (on-call readiness in operations)
• Close exchange with backend developers

Project details

• Start: flexible
• Duration: ab sofort bis 07/2027 + Option
• Remote: hybrid
• Location: Frankfurt + Remote, DE
• Languages: German