Azure AI Application Platform & DevSecOps Engineer

Azure AI Application Platform & DevSecOps Engineer

**Senior Individual Contributor Azure Full Stack Platform Engineering DevSecOps ALM Fully Remote Contract Position C2C 1099 70-85**

USD/hr

Position Summary

Osborn & Holloway is seeking a senior Azure Application Platform & DevSecOps Engineer to help design and build a governed internal AI application incubation platform that allows non-technical and semi-technical business users to create custom web applications safely within the Microsoft Azure ecosystem.

The user experience should be deceptively simple.

A business user may know what application they want to build without knowing how to create an Azure Resource Group, register an application, configure an identity, provision a Key Vault, select a hosting model, create a deployment pipeline, secure a database, configure monitoring, or manage environment promotion.

This role is responsible for helping turn RedSail’s architectural, security, infrastructure, and SDLC expectations into automated platform behavior and enforceable guardrails .

We are not trying to eliminate SDLC. We are trying to encode SDLC into the platform so the business user does not have to perform it manually.

This engineer will work closely with a complementary AI Application Platform Engineer responsible for the conversational, AI-assisted, and application-generation layers of the platform.

Together, these engineers will build a “system that builds systems.”

What Makes This Role Different

This is not a traditional Azure administrator or DevOps position.

The successful candidate will design the infrastructure and governance abstraction layer that allows users who know very little about Azure to safely create applications inside it.

The platform—not the citizen developer—should understand how applications are provisioned, secured, monitored, promoted, governed, and eventually retired.

The goal is not merely automation. The goal is to make the correct enterprise engineering path the easiest—and whenever appropriate, the only—path available.

Key ResponsibilitiesAzure Platform Engineering

·        Design the Azure architecture supporting the application incubation environment.

·        Develop approved deployment patterns for common categories of internally generated web applications.

·        Automate provisioning and configuration of Azure resources required by generated applications.

·        Establish appropriate patterns for Resource Groups, application hosting, storage, databases, APIs, identities, networking, monitoring, and supporting services.

·        Develop reusable infrastructure components using Infrastructure as Code.

·        Use Bicep, Terraform, or other approved technologies to make infrastructure provisioning repeatable and auditable.

·        Establish naming, tagging, ownership, lifecycle, and cost-management standards for generated resources.

Identity, Security and Governance

·        Design secure authentication and authorization patterns using Microsoft Entra ID.

·        Automate appropriate use of managed identities, app registrations, service principals, and RBAC.

·        Establish automated Key Vault and secrets-management patterns.

·        Prevent generated applications from adopting unsafe credential, secret-storage, or access-control practices.

·        Incorporate Azure Policy and other governance mechanisms into the incubation environment.

·        Establish appropriate security scanning, package/dependency validation, and code-quality controls.

·        Collaborate with security and infrastructure stakeholders to define boundaries within which citizen-generated applications may operate.

·        Design technical controls that prevent generated applications from bypassing required governance.

DevSecOps and Application Lifecycle Management

·        Design automated source-control and CI/CD patterns for generated applications.

·        Integrate the platform with Azure DevOps repositories, work items, pipelines, and release processes.

·        Establish standardized DEV, test/UAT, and production deployment patterns.

·        Build automated quality, security, and approval gates into application promotion.

·        Ensure generated applications remain traceable, supportable, and recoverable.

·        Develop rollback, backup, monitoring, logging, and operational-support patterns.

·        Automate creation of appropriate deployment and oper…