DevOps Engineer

Welcome to Natus Sensory India We are continuing to grow our business in India and are now looking to expand our team there. Be part of this exciting journey right from the start!

Natus Sensory India are a leading manufacturer of medical devices and software for a range of solutions, including eight sensory nervous systems. Our mission is to improve patient outcomes in target markets through innovative screening, diagnostic and treatment solutions. We manufacture and distribute a range of medical device products used in the diagnosis of human disorders of sensory system and neural pathways.

Position Summary The Azure Cloud and CI/CD Subject Matter Expert owns the architecture, engineering, automation, security, governance, cost optimization, and operational maturity of Microsoft Azure environments and software delivery platforms. This hands-on role establishes cloud and Dev SecOps standards, builds reusable infrastructure and deployment patterns, and partners with application, security, finance, product, and operations teams to deliver secure, resilient, observable, and cost-effective services.

CRITICAL PRIORITY - AZURE COST SAVINGS: Continuously identify, quantify, prioritize, and deliver measurable Azure savings while protecting availability, security, performance, and business requirements.

Key Responsibilities

• Serve as the technical authority for Azure architecture, platform engineering, networking, identity, security, governance, resiliency, and operations.
• Design and implement landing zones, management-group and subscription structures, resource organization, naming, tagging, policy, and role-based access-control standards.
• Build and maintain CI/CD pipelines using Azure DevOps and/or GitHub Actions for application, database, container, and infrastructure deployments.
• Develop reusable Infrastructure as Code using Terraform and/or Bicep/ARM, with version control, peer review, automated validation, testing, and controlled promotion between environments.
• Implement secure pipeline practices including workload identity or service connections, secrets management, artifact integrity, dependency scanning, SAST, container scanning, approvals, and separation of duties.
• Architect Azure networking, including VNets, subnets, NSGs, routing, private endpoints, Private DNS, VPN/ExpressRoute, Application Gateway, WAF, Load Balancer, and Azure Firewall patterns.
• Design identity and privileged-access solutions using Microsoft Entra ID, managed identities, RBAC, Conditional Access, MFA, PIM, and least-privilege principles.
• Establish monitoring and observability through Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, diagnostic settings, and actionable operational runbooks.
• Own Azure cost optimization and FinOps execution: establish budgets and alerts; analyze Cost Management, Advisor, utilization, and billing data; eliminate waste; right-size resources; schedule non-production workloads; optimize storage; and evaluate Reservations, Savings Plans, licensing, and architectural alternatives.
• Create a prioritized savings backlog with documented baselines, forecasts, owners, target dates, realized savings, avoided costs, and validation that changes do not introduce unacceptable operational or security risk.
• Lead technical reviews, troubleshoot complex deployment and cloud-platform issues, perform root-cause analysis, and drive durable corrective actions.
• Create architecture diagrams, pipeline standards, implementation guides, operational procedures, and evidence supporting security, compliance, and change management.
• Mentor engineers and collaborate with development, database, networking, security, quality, product, and vendor teams.

Required Qualifications

• Extensive hands-on experience architecting, implementing, securing, and operating enterprise Microsoft Azure environments.
• Expertise with Azure DevOps Pipelines and/or GitHub Actions, including YAML pipelines, templates, reusable workflows, environments, approvals, artifacts, variables, and release controls. Azure Cloud & CI/CD SME
• Confidential recruiting document JOB REQUISITION CLOUD ENGINEERING & DEVOPS
• Strong Infrastructure as Code experience with Terraform and/or Bicep/ARM, including modules, remote state, dependency management, validation, and environment promotion.
• Deep knowledge of Azure networking, Microsoft Entra ID, RBAC, managed identities, Key Vault, Azure Policy, …