Senior Azure Platform / DevOps Engineer

About the Role

We build and run cloud platforms for our clients. A lot of the time, this means standing up a reusable Terraform foundation and adapting it for each client and environment. You'd own these platforms: design them, build them from an empty subscription, keep them running, and act as the person who knows how the whole thing fits together.

This is a senior-level role with a lot of trust attached. The clients differ, the topologies differ, the pipelines differ. What stays constant is Azure and the expectation that you can size up an unfamiliar setup, make the right calls, and own the result.

The Ideal Candidate Will Be Able To

• Stand up new platforms from scratch: network, compute, data, and the pipeline to ship to them.

• Make the architecture calls and live with them. This includes knowing when a Terraform change is a safe in-place update and when it's a destroy-and-replace you should never run blind against production.

• Run migrations that carry real risk. Move a live platform onto a new foundation, read the plan correctly, write the runbook, and have a rollback ready before you start.

• Keep platforms healthy over time: provider upgrades, drift, security, and not letting a shared foundation rot as more clients land on it.

• Work directly with the client's own DevOps engineers. Often they're the ones running the apply, and you're advising, so you need to explain a plan, unblock a failure quickly, and be someone the engineer holding the keys trusts.

Qualifications

Azure experience is the hard requirement. You've built and run production Azure yourself, not just used modules someone else wrote. Specifically:

• Azure networking: VNets and subnets, private endpoints and private DNS zones, NSGs and UDRs, NAT, Application Gateway and WAF, load balancers, and hub-and-spoke / Virtual WAN.

• Terraform on Azure, with state treated as something you respect: workspaces, migrations, imports, remote backends, and the discipline not to force an apply through a lifecycle guard.

• The delivery path: Azure Container Registry, VM Scale Sets and cloud-init, and CI/CD with Azure DevOps or GitHub.

• Azure data services: Postgres Flexible Server, managed Redis, Blob storage, and a real sense of their sizing, failover, and cutover risks.

• Entra ID and RBAC: app registrations, service principals, role assignments scoped properly across subscriptions.

• Clear writing and a level head on a live call. You can hand someone a runbook they can follow without you in the room.

• Candidates must be authorized to work in the US. No visa sponsorship is available for this position.

Nice-to-Haves

• Azure certifications (AZ-104, AZ-305).

• Temporal or similar workflow runtimes, and scripting (Bash, Python) for the glue.

• Past consulting or client-embedded work. You've been the outside expert before.

How We Work

Small senior teams, real ownership. We'd rather have one engineer who understands a platform top to bottom than several who each own a slice.

Core Values for Makai Employees

• Be a flexible, innovative, and creative thinker

• Be congenial and a team player

• Be self-sufficient

• Be self-driven with an ownership mentality

• Have a strong work ethic