DevOps & Systems Engineer

• Azure Cloud Administration: Manage and support Azure subscriptions, resource groups, App Services, Azure Functions, Storage Accounts, Azure SQL resources, Service Bus, networking, Key Vault, monitoring, backups, and related services. Maintain appropriate development, UAT, and production environments and ensure resources are configured according to company standards.
• DevOps & CI/CD: Build, maintain, and improve Azure DevOps pipelines for build, testing, deployment, and release management. Administer repositories, branching strategies, service connections, deployment approvals, environment variables, secrets, and release processes. Promote repeatable deployments and minimize manual production changes. SafePoint's cloud architecture already identifies Azure DevOps, CI/CD, Infrastructure as Code, release management, automated testing, and quality gates as core platform capabilities.
• Infrastructure as Code & Automation: Develop and maintain Bicep, ARM, Terraform, PowerShell, or similar automation for infrastructure provisioning and configuration. Automate repetitive administrative, deployment, monitoring, and maintenance tasks. Existing SafePoint role requirements similarly call for Bicep/ARM/Terraform and PowerShell-based cloud automation.
• Monitoring & Production Support: Configure Azure Monitor, Application Insights, Log Analytics, alerts, dashboards, availability monitoring, and performance metrics. Investigate outages, performance degradation, failed deployments, service interruptions, and infrastructure-related application issues. Participate in root-cause analysis and document remediation actions.
• Systems Engineering: Administer and troubleshoot Windows servers, operating systems, DNS, DHCP, certificates, file services, authentication, scheduled services, service accounts, and other corporate infrastructure. Perform system upgrades, patching, configuration management, capacity planning, and lifecycle management.
• Identity & Access Management: Support Microsoft Entra ID, application registrations, managed identities, service principals, role-based access control, MFA, SSO, privileged access, and least-privilege security practices.
• Networking: Support Azure and internal networking, including VNets, subnets, NSGs, private endpoints, VPN connectivity, DNS, routing, firewall rules, IP restrictions, and connectivity troubleshooting between cloud, internal, and third-party systems.
• Internal Hardware & Infrastructure: Support internal servers, network equipment, switches, firewalls, wireless infrastructure, storage devices, conference-room or shared IT equipment, and other business-critical hardware. Coordinate hardware replacements, upgrades, warranties, and lifecycle planning.
• Backup, Disaster Recovery & Business Continuity: Maintain backup and recovery processes for cloud and internal systems. Periodically validate restoration procedures, point-in-time recovery, redundancy, failover, and disaster-recovery capabilities. SafePoint's current cloud architecture calls out Azure Backup, point-in-time recovery, geo-redundancy, high availability, and failover as platform requirements.
• Security & Compliance: Apply system hardening, patching, vulnerability remediation, encryption, secret management, logging, access controls, and security best practices. Work with security resources to address findings and maintain systems appropriate for a regulated insurance environment.
• Cost & Capacity Management: Monitor Azure resource utilization and cloud spending. Identify oversized, unused, or inefficient resources and recommend changes that improve performance or reduce cost. Maintain budgets and alerts where appropriate.
• Technical Documentation: Maintain infrastructure diagrams, inventories, configuration standards, deployment procedures, recovery procedures, support runbooks, architecture documentation, and troubleshooting guides. Documentation is also an established requirement in SafePoint's existing Azure technical roles.
• Vendor & Third-Party Integration Support: Assist with connectivity, certificates, SFTP, APIs, IP allowlists, VPNs, DNS, and other infrastructure requirements for third-party systems.
• Operational Support: Participate in scheduled maintenance and, when necessary, after-hours support for production deployments, outages, infrastructure failures, or critical business systems.

Powered by JazzHR