Senior Azure DevOps Platform Architect (EU)

Про позицію

We are seeking a Senior Azure DevOps Platform Architect to design, build, and validate a fully enterprise-ready Azure DevOps (ADO) platform with strong emphasis on multi-tenancy, security-by-design, automation, and scalable governance. This role involves translating complex enterprise requirements into architecture, implementing a secure and standardized ADO platform, defining migration strategies, and validating solutions through pilots with early-adopter teams.

Обовʼязки12

• Gather and translate enterprise, security, and compliance requirements into a target ADO platform architecture.
• Define organization/project structures, governance models, guardrails, and operational processes for large-scale adoption.
• Collaborate with engineering, security, compliance, and infrastructure teams to define platform standards and rollout strategy.
• Build ADO organizations/projects with enterprise-ready foundations: Repos, pipelines, artifacts, templates, agent strategy, permissions.
• Implement a robust multi-tenant design, including isolation boundaries, shared services, RBAC, and audit separation.
• Develop reusable CI/CD blueprints (YAML templates, golden pipelines, onboarding packages).
• Embed enterprise security requirements directly into CI/CD patterns via standardized controls: SAST, SCA, secret scanning, DAST.
• Define policy enforcement (warnings vs. blocking), exception processes, and audit/evidence traceability.
• Ensure secure connectivity patterns (service connections, identity, least privilege, credential handling).
• Develop automation for provisioning and onboarding: Projects, repos, pipelines, permissions, service connections, etc.
• Create migration playbooks including assessment, pilots, phased rollout, coexistence, and cutover strategies.
• Execute pilot migrations with initial teams, refine patterns, and prepare for scale across the enterprise.

Вимоги8

• Deep experience with YAML pipelines, repo management, agent pools, artifacts, RBAC, and enterprise governance.
• Proven track record designing & implementing DevOps platforms at enterprise scale.
• Strong understanding of isolation models, RBAC boundaries, tenant-specific policies, and audit requirements.
• Ability to embed security controls into platform and CI/CD architecture while meeting enterprise compliance needs.
• Hands-on experience integrating SAST, SCA, secret scanning, and DAST into automated CI/CD workflows.
• Experience automating provisioning, onboarding, and CI/CD standardization (IaC, scripting, templating).
• Experience defining and executing phased migration strategies with pilots, coexistence, and rollback planning.
• Ability to produce high-quality architecture documentation, onboarding guides, and reference implementations.