Azure DevOps & Cloud Infrastructure Engineer
Position Description
Founded in 1976, CGI is among the world's largest independent IT and business consulting services firms. With 94,000 consultants and professionals globally, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services, and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion, and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more about us at cgi.com.
Job Title: Azure DevOps & Cloud Infrastructure Engineer
Experience: 5–8 Years
Job Location: Bangalore
Position ID: J0926-0309
Work Type: Hybrid
Employment Type: Full Time / Permanent
Qualification: Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field.
We are seeking an experienced and proactive Senior Azure DevOps & Cloud Infrastructure Engineer to architect, build, and maintain enterprise grade Azure cloud environments from the ground up. In this role, you will be the primary technical authority responsible for greenfield cloud infrastructure deployments, robust networking topologies, automated CI/CD pipelines, high availability clustering, and business continuity systems.
You will design resilient systems that incorporate multi region fault tolerance, advanced Layer 4 and Layer 7 load balancing, automated container management via AKS, and strict backup/restore controls—ensuring our cloud platform is secure, scalable, and highly available.
1. Technical Stack Summary
- Cloud Platform: Microsoft Azure (Management Groups, Subscriptions, Landing Zones)
- Infrastructure as Code: Terraform, Azure Bicep, ARM Templates
- Networking & Load Balancing: VNet Peering, ExpressRoute, VPN, Azure Load Balancer, Application Gateway (WAF), Azure Front Door, Traffic Manager, Azure Firewall, Private Endpoints
- Containers & Orchestration: Azure Kubernetes Service (AKS), Docker, Helm, NGINX / AGIC Ingress, ArgoCD / Flux
- CI/CD & Automation: Azure DevOps Pipelines (YAML), GitHub Actions, Ansible, PowerShell, Bash, Python
- Backup & Disaster Recovery: Azure Backup, Azure Site Recovery (ASR), Velero
- Observability & Security: Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, Azure Key Vault, Microsoft Entra ID (Azure AD), Azure Policy
2. Key Responsibilities
- Greenfield Cloud Infrastructure & IaC
. Landing Zone Architecture: Architect and provision production ready enterprise Azure Landing Zones based on Microsoft Cloud Adoption Framework (CAF) best practices.
. Infrastructure as Code (IaC): Standardize all infrastructure deployments using modular Terraform or Bicep templates with state management and security scanning.
. Automated Provisioning: Build end to end automated environment creation workflows (Dev, Staging, QA, Prod) with integrated parameterization and validation gates.
- Advanced Networking & Traffic Load Balancing
. Network Topology & Isolation: Design secure Hub and Spoke network topologies, Virtual WAN (vWAN), cross region VNet peering, and strict subnet segmentation.
. Load Balancing & Ingress: Deploy and tune Layer 4 and Layer 7 traffic routing using Azure Load Balancer, Azure Application Gateway (WAF), Azure Front Door, and Traffic Manager.
. SSL & Traffic Policy: Configure SSL/TLS offloading, path based routing, health probe rules, custom WAF rules, and global latency based routing.
. Hybrid Connectivity & Perimeter Security: Implement secure ExpressRoute/VPN connections, Azure Firewall, User Defined Routes (UDRs), BGP routing, Private Link / Private Endpoints, and Azure Private DNS zones.
- Containerization & High Availability Clustering
. AKS Cluster Deployment: Build, scale, and maintain enterprise Azure Kubernetes Service (AKS) multi tenant clusters with dedicated node pools, availability zones, and auto scaling (HPA & Cluster Autoscaler).
. Cluster Networking & Service Mesh: Manage advanced CNI plugins (Azure CNI / Overlay), ingress controllers (AGIC, NGINX), and service mesh architectures for microservice routing.
. Compute & Database HA: Configure Virtual Machine Scale Sets (VMSS) and collaborate with DBAs to manage high availability clusters for Azure SQL Managed Instance, Cosmos DB, and Redis Enterprise.
- CI/CD Pipelines & DevOps Automation
. Pipeline Engineering: Design, implement, and optimize robust CI/CD pipelines in Azure DevOps Pipelines or GitHub Actions for application and infrastructure code.
. GitOps & Release Automation: Establish GitOps workflows to eliminate manual environment updates and ensure configuration drift is automatically detected and reconciled.
. Secret & Artifact Management: Secure pipeline credentials using Azure Key Vault, Service Connections, and Workload Identity Federation.
- Backup, Restore & Business Continuity (DR)
. Automated Backup Operations: Design and enforce centralized backup policies with Azure Backup across virtual machines, databases, stateful persistent volumes (AKS), and storage accounts.
. Disaster Recovery (DR) Orchestration: Formulate, configure, and manage multi region Disaster Recovery plans leveraging Azure Site Recovery (ASR) to meet stringent RTO and RPO objectives.
. Restore Drills & Disaster Testing: Schedule and perform routine backup restore drills, cross region failovers, and failback validation procedures to ensure zero data loss during critical failures.
- Security, Governance & Monitoring
. Identity & Governance: Apply enterprise RBAC, Azure Policy rules, Privileged Identity Management (PIM), and Azure Blueprints across management groups.
. Monitoring & Alerting: Build centralized dashboards and actionable alerting systems using Azure Monitor, Log Analytics, Application Insights, and Grafana.
Required Technical Experience
. Cloud & Networking Mastery: 5+ years of dedicated DevOps/Infrastructure experience, with 3+ years specifically focused on building and managing complex Microsoft Azure environments.
. Networking Skills: Comprehensive understanding of TCP/IP, CIDR blocks, BGP routing, DNS resolution, SSL/TLS certificates, WAF configurations, and load balancing topologies.
. Container Orchestration: Direct experience building and operating production AKS clusters, managing ingress traffic, Helm charts, and cluster autoscaling.
. IaC & Scripting Expertise: Mastery of Terraform or Bicep for modular infrastructure generation, alongside proficiency in PowerShell, Bash, or Python.
. Backup & DR Mastery: Hands on experience configuring Azure Backup, Azure Site Recovery (ASR), and performing full environment backup restore procedures.
CGI is an equal opportunity employer. In addition, CGI is committed to providing accommodations for people with disabilities in accordance with provincial legislation. Please let us know if you require a reasonable accommodation due to a disability during any aspect of the recruitment process and we will work with you to address your needs.
#LI-GB9
Your future duties and responsibilities
Required qualifications to be successful in this role
Together, as owners, let’s turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
Come join our team—one of the largest IT and business consulting services firms in the world.