Release Train Engineer Azure Infrastructure and AKS

Job Title: Release Train Engineer Azure Infrastructure and AKS Job Location: Chicago, IL, 60603 Work Model: Hybrid Work Model Details: 3 times a week is mandatory Shift: M-F, 8am - 5pm Employment Type: Temp to Hire Estimated Duration (In Months): 10 Months Must Have Skills/Attributes: ADO, Azure, BASH, Docker, Kubernetes, PowerShell, Python, Release Train Engineer (RTE) Certified, Terraform, YAML Experience Desired: Azure Infrastructure and AKS (10 yrs), Kubernetes, Docker and Helm (10 yrs), CI/CD Pipeline Engineering (10 yrs), Infrastructure as Code & Scripting (10 yrs), Networking, Security & Monitoring (10 yrs) Required Minimum Education: Bachelor's Degree Job Description: Required Education: Bachelor's Degree Preferred Certification Relevant Azure administration, Azure DevOps, or Kubernetes certifications. Required Skills Hands-on provisioning, configuring, and troubleshooting Azure infrastructure Networking, identity, Key Vault, storage, Azure Container Registry (Secondary) AKS, virtual networks, subnets, network security groups, storage accounts Deploying and supporting containerized API services on AKS Docker, Kubernetes, Helm, kubectl Kubernetes deployments, services, ingress, health probes, resource requests/limits, environment-specific settings (Secondary) AKS clusters: node pools, scaling, upgrades, resource quotas, workload availability YAML-based CI/CD pipelines in Azure DevOps or GitHub Actions Automated testing, artifact management, environment promotion, rollback Integrating automated tests, container image scanning, security checks, approval gates Scripting: PowerShell, Bash, or Python Azure CLI automation Infrastructure as Code Terraform or Bicep Git-based version control (Secondary) Terraform modules, version-controlled configurations Linux, HTTP/REST APIs, DNS, TLS, ingress, load balancing Access controls and secrets management (Azure Key Vault) Least-privilege access, managed identities, workload identity, RBAC Secure API connectivity: DNS, TLS certs, load balancing, private endpoints, Azure API Management integration Production monitoring, incident troubleshooting, controlled releases Azure Monitor, Log Analytics, Application Insights Dashboards and actionable alerts Root-cause resolution across application and infrastructure layers Tested rollback procedures and release runbooks Cosmos DB: container creation, index maintenance, RU allocation, data copying Agile/SAFe: value stream improvement, DevOps, Release on Demand, Continuous Delivery Pipeline Partnering with Agile PMO and delivery leadership (reporting, governance) Preferred (not required) GitOps tools (GitHub Actions), progressive deployment strategies, Prometheus/Grafana Azure API Management, private AKS networking, workload identity, DR planning/testing Enterprise API/integration/data platform experience in financial services or regulated environments Required Soft Skills Clear communication across engineering, security, and operations teams Ownership of technical issues through resolution Collaboration with developers, architects, security, platform teams The Release Train Engineer will provision and manage Azure infrastructure, build deployment automation, and deploy and support API services on Azure Kubernetes Service (AKS). This is a hands-on engineering role requiring practical experience with Azure, Kubernetes, infrastructure as code, and CI/CD pipelines. The engineer will work with development, architecture, security, and operations teams to deliver secure, reliable, and repeatable deployments across development, test, and production environments, and will communicate release status and progress to business and technical stakeholders in the PADS program. Key Responsibilities: Execute production releases, validate service health after deployment, and maintain tested rollback procedures and release runbooks. Configure and operate Cosmos DB databases, including container creation, index maintenance, RU allocation, and data copying. Build and maintain CI/CD pipelines (Azure DevOps or GitHub Actions) to automate builds, testing, image publishing, and deployments across environments. Configure Kubernetes deployments, services, ingress, health probes, resource requests/limits, and environment-specific application settings. Configure secure API connectivity: DNS, TLS certificates, load balancing, private endpoints, and Azure API Management integration where required. Implement least-privilege access, managed identities, workload identity, RBAC, and secure secrets management via Azure Key Vault. Integrate automated tests, container image scanning, security checks, and approval gates into deployment pipelines. Implement monitoring, logging, dashboards, and actionable alerts using Azure Monitor, Log Analytics, and Application Insights. Troubleshoot failed deployments, pod/container issues, networking, authentication, and API performance problems; resolve root causes with development and operations teams. Maintain environment consistency, deployment documentation, and change records per enterprise security and change-management requirements. Partner with developers, architects, security, and platform teams to resolve infrastructure dependencies and prepare API services for production. Improve deployment reliability, recovery time, resource utilization, and Azure costs through automation, capacity tuning, and operational improvements. Encourage collaboration between teams, Product Management, Product Owners, System/Solution Architects, engineering, security, and operations. Improve value flow through value streams by strengthening DevOps, Release on Demand, and Continuous Delivery Pipeline practices. Partner with the Agile Program Management Office and delivery leadership to support program execution, operational excellence, reporting, and governance. Provision, configure, and maintain Azure infrastructure: AKS, Azure Container Registry, VNets, subnets, NSGs, Key Vault, storage accounts. Develop and maintain infrastructure as code using Terraform (version-controlled configs, reusable modules, controlled environment changes). Configure and operate AKS clusters: node pools, scaling, upgrades, resource quotas, workload availability. Containerize API services using Docker; deploy to AKS via Kubernetes manifests and Helm charts. Automate routine infrastructure/operational tasks using Azure CLI, PowerShell, or Bash to reduce manual effort and configuration drift