Senior Azure DevOps Engineer (Platform Engineering)

About the role

Applaudo Studios is looking for a Senior Azure DevOps & Platform Engineer to build secure Azure platforms and deliver infrastructure and applications through Terraform and CI/CD. The role combines Azure platform engineering (landing zones, networking, identity, security, governance) with strong DevOps engineering. It is a contractor position based in Mexico City, with availability to work in the U.S. Central Time Zone.

Key responsibilities

• Design and implement Azure tenant platforms aligned with Microsoft CAF standards.
• Build, deploy and maintain Infrastructure as Code solutions using Terraform.
• Implement Azure landing zones to support application and workload migrations.
• Manage and optimize CI/CD pipelines, source control and project workflows in Azure DevOps, including environment approvals, security gates and container image promotion.
• Review peers' pull requests and handle infrastructure requests from application teams in a Kanban workflow.
• Automate resource provisioning, scaling and infrastructure management, and write automation scripts in PowerShell, Python or Bash.
• Implement and manage Azure security controls, including IAM configurations, and enforce governance and policy compliance.
• Monitor infrastructure for performance, security and cost efficiency, and provide technical guidance and troubleshooting to stakeholders.

Required profile

• Bachelor's degree in Computer Science, Software Engineering, Computer Engineering or a related field, or equivalent professional experience.
• 9+ years of hands-on experience in DevOps and cloud environments.
• Strong spoken English (B2+) to discuss technical scenarios with US-based stakeholders.
• Experience in financial services or regulated environments is a plus.

Required skills

• Azure tenant platforms and Microsoft CAF, including Azure landing zones.
• Terraform, including state management, imports, drift detection, refactoring and secret management with Azure Key Vault.
• Azure networking (hub-spoke, firewall, VPN Gateway/ExpressRoute, private endpoints, NSGs, route tables).
• Azure compute (AKS, Container Apps, App Service, Function Apps) and Azure Policy.
• PowerShell, Python or Bash scripting.
• Nice to have: Azure Data Factory, Databricks, Service Bus, Event Grid, Event Hubs, API Management, Bicep.