Senior DevOps/Platform Engineer (Azure)

Calling All Upstarters! SENIOR AZURE DEVOPS WANTED! We are Upstart 13. We are humble, hungry, and competent people who are radically changing the expectations and experience of outsourcing for all participants by challenging barriers that create inequality and by bringing down borders in technology for people everywhere. We’re all about delivering value and doing big things. We have become a game changer for teams around the world who look to Upstart’s services as a differentiator. Job Description: We are seeking a Senior DevOps / Platform Engineer located in Latam to own and evolve the Azure-based API Platform that powers the company's compounding operations. It's a mature, non-greenfield environment: the foundation, governance framework, and security controls are already built, so the role is about operating and advancing the platform rather than standing it up from scratch. The work spans a multi-subscription setup (Dev, QA, UAT, Staging, Production) running private AKS clusters, Azure Firewall, App Gateway, Key Vault, and ACR, with infrastructure managed via Bicep and Azure DevOps pipelines. What sets it apart from a typical DevOps job is the heavy emphasis on security governance and strategic thinking. The person is expected to influence decisions with the security team, developers, and the CTO, not just execute tasks. Responsibilities Operate private AKS clusters and implement admission controllers. Enforce image signing and scanning within the CI/CD pipelines. Design deployment strategies such as blue-green and canary rollouts with pre-deploy security gates. Own cost optimization across all environments. Maintain documented wake-up processes with defined SLAs. Manage monitoring and observability tooling. Lead cross-functional conversations (security, developers, CTO) about phased rollouts across subscriptions, bringing cost data, risk context, and an infrastructure plan that leaves everyone aligned. Reframe problems strategically rather than just executing tasks. Qualifications Technical skills: 6+ years in DevOps / SRE / Cloud / Platform / Infrastructure Engineering. 3–5+ years of hands-on Azure infrastructure experience, specifically with AKS. Strong experience with Azure Landing Zone concepts: hub-spoke, segmentation, governance, RBAC, Azure Policy, tagging, and private connectivity. Proven expertise with Bicep and PR-based IaC workflows (validation/linting/scanning, controlled change, drift awareness). Deep knowledge of Azure networking: VNets, NSGs, UDRs/route tables, Private Endpoints/DNS, Load Balancers, NAT Gateway, and secure outbound patterns. Production experience operating AKS, including private clusters, upgrades, ingress, Helm, autoscaling, and troubleshooting using kubectl (logs/events/probes/DNS/network). Experience with APIM / App Gateway / Front Door / WAF and API security patterns (TLS, OAuth2/OIDC, JWT validation, throttling/rate limiting, IP filtering). Experience with Azure DevOps YAML pipelines across environments, including approvals/gates and rollback strategy. Strong security fundamentals: Entra ID RBAC, managed identities/workload identity, Key Vault, secret rotation, and certificate lifecycle management. Proficiency with Azure CLI, PowerShell, and/or Python for automation and operational tooling. Soft skills: Strong ownership mindset; comfortable operating in production-critical environments. Excellent troubleshooting, communication, and documentation skills (runbooks, postmortems, procedures). Collaborative approach with developers, security, and platform stakeholders. Bonus skills: Terraform experience. Hybrid connectivity troubleshooting (VPN/ExpressRoute), Azure Firewall, DNS/routing, private service access. GitOps (Flux/ArgoCD), service mesh (Istio), Prometheus/Grafana. Azure certifications (e.g., AZ-400, AZ-305, AZ-104, AZ-500) and FinOps/cost optimization experience. Why Upstart13? We put people first at Upstart 13! We believe the world is filled with amazing people and we are willing to go to great lengths to seek out others who share our values to join our cause of bringing down borders in technology for people everywhere. We develop leaders at Upstart 13, we focus on what matters to do meaningful work, we own our shit, we stay curious, and we understand responsibility leads to giving. We do big things together! Perks: Job type: long-term, full-time job. Fully remote. USD competitive salary. 20+ Paid time off days. Are you ready to join our cause? Be sure to ask, “ why 13? ”