Senior DevOps Consultant

Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change. By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses. From prototype to real-world impact - be part of a global shift by doing work that matters. We are looking for a Senior DevOps Lead / Senior Platform Engineer to own and lead the platform engineering function. This role is highly hands-on and requires strong experience in Azure , GitHub Actions , Terraform , containerized deployments, secure CI/CD, observability, and production-grade platform operations. The candidate will lead a small platform team of 2 engineers and will be accountable for building secure, repeatable, scalable, and auditable platform foundations across Dev, Staging, and Production environments. The platform requires strong security, privacy, and audit controls, including environment isolation, Key Vault/KMS integration, managed identity, TLS, CI/CD security gates, OpenTelemetry-based logging, DLP-safe telemetry, dashboards, rollback, and release runbooks. Key Responsibilities Platform Engineering & Azure Infrastructure Own the end-to-end Azure platform architecture and implementation for Dev, Staging, and Production environments. Design and provision secure, repeatable cloud infrastructure using Terraform . Build and maintain Azure services such as AKS / App Services, Azure Key Vault, Azure Container Registry, Azure Monitor / Application Insights, API Management, Azure networking, private endpoints, managed identities, storage, and database infrastructure. Implement environment isolation, namespace isolation, network boundaries, and environment-specific configuration controls. Ensure infrastructure changes are version-controlled, reviewable, reproducible, and auditable. CI/CD & Release Engineering Design, implement, and own GitHub Actions pipelines for build, test, security scanning, artifact creation, deployment, and promotion across environments. Implement CI/CD quality and security gates including dependency checks, container/image scans, code validation, policy checks, and release traceability. Build controlled deployment flows with rollback and recovery procedures. Ensure pipeline failures block unsafe releases and provide useful feedback to engineering teams. Support feature flags, tenant/module enablement controls, and safe operational kill-switch patterns. Security, Privacy & Compliance Controls Implement secure-by-default platform controls, including TLS 1.3, Azure Key Vault, managed identity, secret-free deployment configuration, and per-environment access controls. Ensure logs, traces, deployment artifacts, and platform telemetry remain PII-safe and do not capture request/response bodies. Work with architecture and security stakeholders to implement DLP scrubbing for logs and telemetry. MLOps Support — Added Advantage Collaborate with the AI/ML team to support model deployment, model artifact handling, inference service deployment, model lineage metadata, and ML runtime observability. Support ONNX model deployment pipelines, artifact versioning, and environment promotion where required. Help define MLOps patterns for model release, rollback, and monitoring. MLOps experience is an advantage, but not mandatory. Required Skills & Required Skills & Experience Must-Have 8+ years of experience in DevOps, Cloud Engineering, Platform Engineering, or Site Reliability Engineering. Strong hands-on experience with Azure cloud platform . Strong hands-on experience with GitHub Actions for CI/CD. Strong hands-on experience with Terraform and infrastructure-as-code practices. Experience building and operating Dev, Staging, and Production environments. Experience with containerized workloads using Docker and Kubernetes, preferably AKS. Strong understanding of Azure networking, identity, secrets management, monitoring, and security controls. Experience with Azure Key Vault, managed identity, RBAC, and secure secret handling. Experience implementing CI/CD security gates and deployment governance. Experience with observability tooling such as OpenTelemetry, Azure Monitor, Application Insights, Prometheus, Grafana, or similar. Strong scripting skills using Bash, PowerShell, Python, or equivalent. Ability to troubleshoot complex platform, pipeline, environment, and deployment issues. Strong documentation discipline for runbooks, release notes, operational procedures, and platform standards. Proven ability to lead a small technical team while remaining deeply hands-on. Good-to-Have MLOps experience, especially model artifact deployment, model serving, model monitoring, or ML pipeline integration. Experience supporting ONNX, ML inference services, or Python-based ML workloads. Experience with regulated fintech, compliance, AML, banking, payments, crypto, or enterprise SaaS environments. Experience with Azure API Management, Azure Policy, Defender for Cloud, private endpoints, WAF, and Azure Landing Zone patterns. Experience with Helm, Kubernetes operators, Argo CD, Flux, or GitOps. Experience with DLP controls, audit logging, compliance evidence, SOC2, ISO 27001, or similar control frameworks. Experience designing multi-tenant SaaS infrastructure. Experience with feature flags, kill-switches, blue-green/canary deployments, and rollback automation. Discover some of the global benefits that empower our people to become the best version of themselves: Finance: Competitive salary package, share plan, company performance bonuses, value-based recognition awards, referral bonus; Career Development : Career coaching, global career opportunities, non-linear career paths, internal development programmes for management and technical leadership; Learning Opportunities: Complex projects, rotations, internal tech communities, training, certifications, coaching, online learning platforms subscriptions, pass-it-on sessions, workshops, conferences; Work-Life Balance: Hybrid work and flexible working hours, employee assistance programme; Health: Global internal wellbeing programme, access to wellbeing apps; Community: Global internal tech communities, hobby clubs and interest groups, inclusion and diversity programmes, events and celebrations. At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.