azureterraformbicepazure devopsdatabricksci/cdcloud securityinfrastructure as codedevopssite reliability engineeringprivacyaudience managementmonitoringautomationpythonpowershellbash
Key details
Salary
Not specified
Employment type
Full-time
Seniority
Senior
Years experience
5-10
Location
Pune, India
Full job description
Azure DevOps Engineer responsible for designing, automating, securing, and operating Azure cloud infrastructure for privacy-compliant clean-room and audience activation solutions. Collaborate with cloud architects, Databricks engineers, backend developers, QA engineers, privacy specialists, and infrastructure teams to establish repeatable environments, deployment pipelines, private connectivity, identity controls, observability, and production support for data ingestion, matching, segmentation, audience management, and activation workflows. Requires strong experience with Microsoft Azure services, Terraform, Bicep, Azure DevOps or similar CI/CD tools, Azure Databricks automation, secure backend service deployment, cloud security best practices, and privacy-sensitive data platforms. Bachelor's degree and at least 6 years of relevant experience required. Location: Pune, India (on-site).
What you'll do
Translate approved clean-room architecture, cloud security standards, privacy requirements and operational controls into an executable and reusable Azure platform design
Similar jobs
More roles worth a look
Related opportunities based on specialty and working model so candidates can keep momentum.
Provision and maintain reusable Azure infrastructure using Terraform and Bicep
Deploy and operate the persistent standalone Azure backend service for audience workflow orchestration, approvals, traceability and audit logging
Automate Azure Databricks platform and workload deployments including workspace configuration, Unity Catalog integration, cluster policies, permissions, secret access, jobs, diagnostic settings and secure connectivity
Build and manage CI/CD pipelines for infrastructure, Databricks workloads, backend APIs and Azure-hosted Audience Builder across development, SIT, UAT and production with approval gates and automated validation
Implement identity, key and secrets management using Microsoft Entra ID, service principals, managed identities, role-based access control and Azure Key Vault
Enforce clean-room trust boundary through private networking, firewalls, Private Link, allow-listed egress, encryption and cross-tenant connectivity controls
Enable secure integration between audience-management applications, backend APIs, audience segment stores, connector services and approved publisher activation endpoints
Implement end-to-end monitoring, centralized logging and immutable audit trails for ingestion, Databricks processing, matching, segmentation, approvals, exports and activation
Maintain dashboards, alerts, backup and recovery, runbooks, incident procedures, cost controls and operational handover documentation
Requirements
Bachelor's degree in Engineering, Computer Science or related technical field
At least 6 years of hands-on experience in DevOps, cloud engineering, platform engineering or site reliability engineering
Strong hands-on experience with Microsoft Azure services including virtual networks, Private Link, network security groups, Private DNS, storage or ADLS, Azure SQL, virtual machines or approved managed compute, Azure Monitor, Log Analytics, Key Vault and Microsoft Entra ID
Proven infrastructure-as-code experience using Terraform including reusable modules, remote state, policy controls and environment-specific configuration
Practical experience with Bicep or ARM templates is an advantage
Strong CI/CD experience with Azure DevOps, GitHub Actions or Jenkins including gated releases, secrets handling, automated testing, artifact management, environment promotion and rollback
Experience automating Azure Databricks configuration and deployments using Databricks Asset Bundles, CLI, REST APIs or equivalent tooling
Knowledge of Unity Catalog, cluster policies, service principals and Databricks audit logs is strongly preferred
Experience deploying and operating secure Linux-based backend services, APIs, containers or virtual machines supported by automation in Bash, PowerShell or Python and disciplined Git-based engineering practices
Strong understanding of cloud security, least-privilege identity, encryption, HMAC or key management, private networking, observability, backup, disaster recovery and production incident management
Experience supporting privacy-sensitive data platforms, data clean rooms, audience platforms or regulated workloads preferred
