Job Summary
The DevOps & Systems Engineer is responsible for the reliability, security, automation, deployment, monitoring, and ongoing administration of the company's cloud and internal technology infrastructure.
This position serves as the primary technical resource for Microsoft Azure infrastructure and DevOps operations , while also supporting internal servers, networking, hardware, identity, backups, and other systems-engineering responsibilities.
The role works closely with software development, data engineering, security, and business technology teams to ensure applications and infrastructure are deployed consistently, monitored effectively, secured appropriately, and designed for scalability and high availability.
The position should emphasize automation and repeatability rather than manual administration. SafePoint's existing technical direction already incorporates Azure PaaS services, PowerShell automation, Infrastructure as Code, Azure DevOps/Git-based CI/CD, Azure Monitor, and Application Insights.
Duties and responsibilities Azure Cloud Administration: Manage and support Azure subscriptions, resource groups, App Services, Azure Functions, Storage Accounts, Azure SQL resources, Service Bus, networking, Key Vault, monitoring, backups, and related services. Maintain appropriate development, UAT, and production environments and ensure resources are configured according to company standards.
DevOps & CI/CD: Build, maintain, and improve Azure DevOps pipelines for build, testing, deployment, and release management. Administer repositories, branching strategies, service connections, deployment approvals, environment variables, secrets, and release processes. Promote repeatable deployments and minimize manual production changes. SafePoint's cloud architecture already identifies Azure DevOps, CI/CD, Infrastructure as Code, release management, automated testing, and quality gates as core platform capabilities.
Infrastructure as Code & Automation: Develop and maintain Bicep, ARM, Terraform, PowerShell, or similar automation for infrastructure provisioning and configuration. Automate repetitive administrative, deployment, monitoring, and maintenance tasks. Existing SafePoint role requirements similarly call for Bicep/ARM/Terraform and PowerShell-based cloud automation.
Monitoring & Production Support: Configure Azure Monitor, Application Insights, Log Analytics, alerts, dashboards, availability monitoring, and performance metrics. Investigate outages, performance degradation, failed deployments, service interruptions, and infrastructure-related application issues. Participate in root-cause analysis and document remediation actions.
Systems Engineering: Administer and troubleshoot Windows servers, operating systems, DNS, DHCP, certificates, file services, authentication, scheduled services, service accounts, and other corporate infrastructure. Perform system upgrades, patching, configuration management, capacity planning, and lifecycle management.
Identity & Access Management: Support Microsoft Entra ID, application registrations, managed identities, service principals, role-based access control, MFA, SSO, privileged access, and least-privilege security practices.
Networking: Support Azure and internal networking, including VNets, subnets, NSGs, private endpoints, VPN connectivity, DNS, routing, firewall rules, IP restrictions, and connectivity troubleshooting between cloud, internal, and third-party systems.
Internal Hardware & Infrastructure: Support internal servers, network equipment, switches, firewalls, wireless infrastructure, storage devices, conference-room or shared IT equipment, and other business-critical hardware. Coordinate hardware replacements, upgrades, warranties, and lifecycle planning.
Backup, Disaster Recovery & Business Continuity: Maintain backup and recovery processes for cloud and internal systems. Periodically validate restoration procedures, point-in-time recovery, redundancy, failover, and…