Cloud Engineer/ Scrum Master

Preferred Certification -Relevant Azure administration, Azure DevOps, or Kubernetes certifications.

Required Skills
Hands-on provisioning, configuring, and troubleshooting Azure infrastructure -Networking, identity, Key Vault, storage, Azure Container Registry -(Secondary) AKS, virtual networks, subnets, network security groups, storage accounts -Deploying and supporting containerized API services on AKS -Docker, Kubernetes, Helm, kubectl -Kubernetes deployments, services, ingress, health probes, resource requests/limits, environment-specific settings -(Secondary) AKS clusters: node pools, scaling, upgrades, resource quotas, workload availability -YAML-based CI/CD pipelines in Azure DevOps or GitHub Actions -Automated testing, artifact management, environment promotion, rollback -Integrating automated tests, container image scanning, security checks, approval gates -Scripting: PowerShell, Bash, or Python -Azure CLI automation -Infrastructure as Code -Terraform or Bicep -Git-based version control -(Secondary) Terraform modules, version-controlled configurations -Linux, HTTP/REST APIs, DNS, TLS, ingress, load balancing -Access controls and secrets management (Azure Key Vault) -Least-privilege access, managed identities, workload identity, RBAC -Secure API connectivity: DNS, TLS certs, load balancing, private endpoints, Azure API Management integration -Production monitoring, incident troubleshooting, controlled releases -Azure Monitor, Log Analytics, Application Insights -Dashboards and actionable alerts -Root-cause resolution across application and infrastructure layers -Tested rollback procedures and release runbooks -Cosmos DB: container creation, index maintenance, RU allocation, data copying -Agile/SAFe: value stream improvement, DevOps, Release on Demand, Continuous Delivery Pipeline -Partnering with Agile PMO and delivery leadership (reporting, governance)

Preferred (not required) -GitOps tools (GitHub Actions), progressive deployment strategies, PrometheGrafana -Azure API Management, private AKS networking, workload identity, DR planning/testing -Enterprise API/integration/data platform experience in financial services or regulated environments

Required Soft Skills -Clear communication across engineering, security, and operations teams -Ownership of technical issues through resolution -Collaboration with developers, architects, security, platform teams The Release Train Engineer will provision and manage Azure infrastructure, build deployment automation, and deploy and support API services on Azure Kubernetes Service (AKS). This is a hands-on engineering role requiring practical experience with Azure, Kubernetes, infrastructure as code, and CI/CD pipelines. The engineer will work with development, architecture, security, and operations teams to deliver secure, reliable, and repeatable deployments across development, test, and production environments, and will communicate release status and progress to business and technical stakeholders in the PADS program.

Key Responsibilities: -Execute production releases, validate service health after deployment, and maintain tested rollback procedures and release runbooks. -Configure and operate Cosmos DB databases, including container creation, index maintenance, RU allocation, and data copying. -Build and maintain CI/CD pipelines (Azure DevOps or GitHub Actions) to automate builds, testing, image publishing, and deployments across environments. -Configure Kubernetes deployments, services, ingress, health probes, resource requests/limits, and environment-specific application settings. -Configure secure API connectivity: DNS, TLS certificates, load balancing, private endpoints, and Azure API Management integration where required. -Implement least-privilege access, managed identities, workload identity, RBAC, and secure secrets management via Azure Key Vault. -Integrate automated tests, container image scanning, security checks, and approval gates into deployment pipelines. -Implement monitoring, logging, dashboards, and actionable alerts using Azure Monitor, Log Analytics, and Application Insights. -Troubleshoot failed deployments, pod/container issues, networking, authentication, and API performance problems; resolve root causes with development and operations teams. -Maintain environment consistency, deployment documentation, and change records per enterprise security and change-management requirements. -Partner with developers, architects, security, and platform teams to resolve infrastructure dependencies and prepare API services for production. -Improve deployment reliability, recovery time, resource utilization, and Azure costs through automation, capacity tuning, and operational improvements. -Encourage collaboration between teams, Product Management, Product Owners, System/Solution Architects, engineering, security, and operations. -Improve value flow through value streams by strengthening DevOps, Release on Demand, and Continuous Delivery Pipeline practices. -Partner with the Agile Program Management Office and delivery leadership to support program execution, operational excellence, reporting, and governance. -Provision, configure, and maintain Azure infrastructure: AKS, Azure Container Registry, VNets, subnets, NSGs, Key Vault, storage accounts. -Develop and maintain infrastructure as code using Terraform (version-controlled configs, reusable modules, controlled environment changes). -Configure and operate AKS clusters: node pools, scaling, upgrades, resource quotas, workload availability. -Containerize API services using Docker; deploy to AKS via Kubernetes manifests and Helm charts. -Automate routine infrastructure/operational tasks using Azure CLI, PowerShell, or Bash to reduce manual effort and configuration drift