Senior DevSecOps Engineer (Azure)

• We are building a next-generation, cloud-native platform to store and manage compliance evidence. This system will ingest data from various internal tools via secure APIs, store it with cryptographic integrity guarantees, and make it available for auditing and GRC workflows. We're looking for a Senior DevSecOps Engineer to lead the design, development, and hardening of this critical platform on Microsoft Azure.
  
• What You'll Do
  
• Design and build secure API ingestion pipelines using Azure API Management (APIM) with OAuth2/JWT validation and rate limiting.
  
• Develop event-driven ingestion workflows using Azure Service Bus and Durable Azure Functions.
  
• Implement an immutable, tamper-evident storage solution using Azure Blob Storage (WORM policies) and Azure Cosmos DB.
  
• Architect high-performance query caching using Redis Cache, while maintaining source-of-truth immutability.
  
• Integrate Azure Key Vault for envelope encryption of stored artifacts, including managing customer-managed keys (CMK).
  
• Build comprehensive Log Analytics Workspace pipelines to track ingestion events, access audits, and integrity checks.
  
• Write all infrastructure as code using Terraform, ensuring a policy-as-code compliant environment.
  
• Integrate with third-party tools (e.g., GRC platforms, vulnerability scanners) to build a seamless ingestion process.
  
  

Requirements

• 5 years building production workloads on Microsoft Azure
  
• Azure API Management (APIM) ? Policies (Inbound/Outbound XML), Backends, Named Values, Developer Portal & Versioning
  
• Event-Driven & API-First Architecture
  
• Azure Cosmos DB / NoSQL Database Management
  
• Immutable & Append-Only Storage (WORM Blob Storage, Cosmos DB Change Feed)
  
• Azure Key Vault (CMK, Key Rotation, Purge Protection)
  
• Zero Trust Networking ? Private Endpoints, VNet Integration, NSG & UDR
  
• Terraform (Modules, Remote State, Azure Provider)
  
• CI/CD using GitHub Actions or Azure DevOps
  
• Strong programming experience in Python & Node.js
  
• Integrated Testing & Automation
  
• KQL (Kusto Query Language) for Monitoring, Alerting & Audit Analysis
  
• Third-Party API Integrations (GRC, Vulnerability Scanners, Ticketing Platforms)
  
• Experience working in regulated environments (PCI-DSS, SOX, GLBA)