Senior DevOps / Platform Engineer (Azure)

About this role

Senior DevOps / Platform Engineer (Azure)
Type: Remote Contract
Location: United States (US work authorization required)
Openings: 2 positions, including 1 Platform Lead
Start Date: Around December 1, 2026
Duration: Multi-month engagement, with potential extension
About Virtasant
Virtasant is a global technology services company with a network of over 4,000 technology professionals across 130+ countries. We specialize in cloud architecture, infrastructure, migration, and optimization, helping enterprises scale efficiently while maintaining cost control.
Our clients range from Fortune 500 companies to fast-growing startups, relying on us to build high-performance infrastructure, optimize cloud environments, and enable continuous delivery at scale.
About the role
We are building a senior engineering team for a large enterprise program in healthcare operations and workforce decisioning. The platform helps operations leaders understand what is happening across their workforce, make informed decisions, take action within the enterprise systems they already use, and measure the results.
We are looking for two Senior DevOps / Platform Engineers, including one Platform Lead, to design, build, secure, and operate the production infrastructure supporting this platform.
The environment will run within the client's own Azure tenant, handle regulated workforce and operational data, and support isolated production deployments for individual customers.
This is a hands-on engineering role requiring deep Azure expertise, infrastructure as code, cloud security, and production platform ownership. You will establish the initial build environment, develop the production infrastructure, and implement the automation, security controls, observability, and disaster recovery capabilities needed to operate a reliable enterprise platform.
For the Platform Lead position, you will also own key architectural decisions, establish engineering standards, and work directly with the client's architects and security teams.
What You'll Do

• Design, build, and maintain production Azure infrastructure, including subscriptions, landing zones, private networking, managed identities, Azure Key Vault, and Azure Monitor.

• Develop and maintain infrastructure as code using Terraform or Bicep, creating reusable modules and automated provisioning processes.

• Establish the initial build and development environments, followed by secure, production-ready infrastructure within the client's Azure tenant.

• Design and implement isolated customer deployments, ensuring strict separation of subscriptions, networking, encryption keys, and data stores.

• Build repeatable infrastructure deployment processes that allow new customer environments to be provisioned consistently and efficiently.

• Implement secure identity and access management using Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time access, and break-glass procedures.

• Design and maintain secure CI/CD pipelines using client-controlled repositories and runners, including automated testing, security scanning, approval workflows, and controlled production releases.

• Implement cloud security controls and support enterprise security assessments, penetration testing, compliance reviews, and vulnerability remediation.

• Build observability capabilities across customer deployments, including centralized logging, metrics, distributed tracing, alerting, and integration with enterprise SIEM platforms.

• Design and implement resilient infrastructure, backup strategies, zone redundancy, and disaster recovery solutions, including secondary-region failover capabilities.

• Define recovery objectives, conduct disaster recovery and performance testing, and document results and remediation actions.

• Collaborate with application engineers, security teams, enterprise architects, and client stakeholders to ensure infrastructure meets operational, security, and performance requirements.

• Develop operational runbooks, infrastructure documentation, and incident response procedures.

• Participate in production on-call rotations, incident troubleshooting, and post-deployment hypercare.

• Take ownership of infrastructure throughout its lifecycle, from architecture and implementation through production deployment, monitoring, troubleshooting, and continuous improvement.

• For the Platform Lead position, guide technical architecture, establish platform engineering standards, coordinate engineering activities, and represent the team in client architecture and security discussions.

What We're Looking For
Must-Have Experience

• Senior Azure platform engineering experience. You have designed, built, and operated production Azure environments end to end, including subscriptions, landing zones, private networking, managed identities, Key Vault, and Azure Monitor. You have personally implemented infrastructure rather than only maintaining environments designed by others.

• Infrastructure as code. Strong hands-on experience with Terraform or Bicep, including reusable infrastructure modules, automated provisioning, configuration management, and infrastructure lifecycle ownership.

• Security and regulated environments. You have built production platforms handling PHI or similarly sensitive data and successfully supported HIPAA, SOC 2, or comparable enterprise security reviews. You have participated in penetration testing, addressed security findings, and produced technical evidence for compliance assessments.

• Identity and secrets management. Strong experience with Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time and break-glass access, credential rotation, and secure secrets management. You understand how to eliminate long-lived credentials from pipelines and repositories.

• Multi-tenant infrastructure architecture. You have designed and operated customer-isolated environments with separate networking, encryption keys, and data stores. You…