Associate Technical Lead – Azure DevOps in Colombo at 99X Technology

We’re looking for a hands-on Associate Technical Lead to design, build, and operate our Microsoft Azure infrastructure. You’ll lead technical decisions around Azure Kubernetes Service (AKS), infrastructure automation, and GitOps-based delivery. You’ll also work with development teams to improve how they deploy and operate applications, while mentoring engineers on DevOps practices and cloud architecture.

• Design, provision, and maintain secure, scalable, and reliable Azure infrastructure using Terraform or Bicep.
• Architect and operate Docker-based workloads on AKS. Manage cluster provisioning, upgrades, node pools, autoscaling, workload scheduling, and cost optimisation.
• Configure Kubernetes ingress, network policies, namespaces, role-based access control (RBAC), resource quotas, and managed identities. Integrate Azure Key Vault with Kubernetes for secrets management.
• Design and manage Azure networking, including virtual networks, subnets, peering, and private endpoints.
• Lead GitOps adoption using Argo CD to manage infrastructure and application configuration through version control.
• Build and maintain CI/CD pipelines using Azure DevOps Pipelines or GitHub Actions to automate builds, tests, and deployments.
• Set up observability across metrics, logs, and traces, and maintain dashboards and alerts.
• Partner with development teams to embed vulnerability scanning, policy enforcement, and compliance checks into delivery workflows.
• Guide engineers on technical decisions, review infrastructure changes, and document operational practices through runbooks and guides.

• 5+ years of overall experience, including at least 2 years in DevOps or cloud engineering.
• Hands-on experience with Docker, including writing Dockerfiles, creating multi-stage builds, and troubleshooting container networking and volumes.
• Experience operating AKS clusters, including cluster lifecycle management, workload deployment, autoscaling, and node pool management. Familiarity with taints, tolerations, and workload scheduling.
• Working knowledge of Kubernetes resources, including Deployments, Services, ConfigMaps, StatefulSets, DaemonSets, Jobs, and namespaces.
• Experience with Azure App Service, Azure Container Registry, Azure Virtual Network, and Azure Load Balancer, along with familiarity with Azure identity and access management, managed identities, and RBAC.
• Experience configuring Kubernetes ingress controllers, TLS termination, and routing rules. Experience with cert-manager and secrets management using Azure Key Vault or equivalent tools.
• Experience implementing GitOps with Argo CD or a similar tool and building CI/CD pipelines with Azure DevOps Pipelines or GitHub Actions.
• Hands-on experience with Terraform or Bicep for Azure infrastructure. This includes writing reusable Terraform modules and managing state and plan/apply workflows, or authoring Bicep templates and modules and deploying them through the Azure CLI or CI/CD pipelines.
• Experience building dashboards and configuring monitoring and alerts with Prometheus, Grafana, Azure Monitor, or equivalent tools.
• Ability to take ownership of production issues, explain technical trade-offs clearly, and guide engineers through design and operational decisions.

• Experience with Helm, service mesh technologies such as Istio or Linkerd, or multi-region AKS deployments.
• Familiarity with DevSecOps tooling such as Trivy, Checkov, and static or dynamic application security testing.
• Bash or Python scripting for automation and operational tooling.
• Experience with the LGTM observability stack (Loki, Grafana, Tempo, and Mimir).
• Production experience with Kafka or Kafka-compatible systems, including high-throughput event streaming.
• Experience working directly with clients or across engineering and business teams.
• Relevant certifications such as AZ-104, AZ-400, CKA, or CKAD.