Azure DevOps, Security and Cloud Engineer

This role will support both internal and client Azure environments—managing DevOps pipelines, cloud deployments, resource optimization, and security—while acting as the primary Azure DevOps (ADO) resource for client Azure projects enforcing infrastructure standards and governance. The ideal candidate will also have experience deploying and managing Azure Development Desktops, VPN solutions, and exposure to advanced Azure technologies such as Service Fabric and Azure AI Foundry. Key Responsibilities: • Design, implement, and manage Azure DevOps (ADO) environments and CI/CD pipelines for Pandesco and client projects. • Serve as a client-facing ADO engineer supporting multiple Azure-based initiatives. • Deploy, monitor, and optimize Azure cloud resources including compute, networking, storage, and security components. • Buildout pipelines to automate deployment of Fabric workspaces, data pipelines, and analytics assets. • Buildout pipelines to automate deployment and management of Logic Apps environment and workflows, connectors, actions and triggers • Secure and manage the Client's Azure data, application and integration ecosystem, focusing on protecting data flows, applications, and automated workflows across Azure Fabric, App Services, and Logic Apps. • Configure and maintain Azure Development Desktops (AVD) and secure remote development environments. • Implement and troubleshoot VPN connectivity for secure communication between client, on-premise, and cloud systems. • Manage infrastructure automation using ARM templates, Bicep, or Terraform. • Conduct performance tuning, cost management, and proactive monitoring of Azure workloads. • Apply and maintain Azure security best practices including RBAC, policies, conditional access, and Defender for Cloud. • Implement role-based access and managed identities • Collaborate with Pandesco’s development, operations, and client teams to deliver reliable, scalable solutions. • Enable observability, create dashboards, & reports for operational insights. • Maintain detailed documentation of configurations, pipelines, and processes. Required Qualifications: • 3+ years of hands-on experience managing Microsoft Azure environments. • Strong expertise in Azure DevOps (ADO) pipelines, repositories, artifacts, and releases. • Proven experience supporting client-facing DevOps and Azure projects. • Proficiency with Azure Virtual Desktop (AVD) configuration and management. • Strong understanding of VPN technologies including Azure VPN Gateway, IPsec, and network security. • Knowledge of Infrastructure as Code (IaC) (ARM, Bicep, Terraform). • Ability to audit existing infrastructure and drive improvements. • Proficiency in PowerShell, Python, or Bash scripting. • Familiarity with Azure networking, Active Directory integration, and cloud monitoring tools, Azure networking and security (identity, access /secrets management). Preferred Qualifications: • Microsoft certifications such as AZ-104 (Azure Administrator),AZ-305 – Designing Microsoft Azure Infrastructure Solutions, or AZ-400 (DevOps Engineer Expert) and AZ-500 – Microsoft Azure Security Technologies. • Experience with Azure Service Fabric for microservices orchestration and scalability. • Familiarity with Azure AI Foundry for AI model deployment, integration, and operationalization. • Experience in managed service or consulting environments. • Understanding of compliance frameworks and security standards (SOC, PCI, ISO).