Senior Devops Engineer

Overview

Sr. DevOps Engineer on FNZ's Cloud Platform team, building and maintaining enterprise-scale infrastructure deployment frameworks using Terraform, Kubernetes and Azure DevOps for repeatable, secure, config-driven deployments of the wealth management platform.

What you'll do

• Design, develop and maintain Terraform compositions and reusable modules for Azure resources including AKS, ACR, SQL Managed Instance, Key Vault, VNets and Application Gateway, ensuring modularity, testability and semantic versioning.
• Deploy and manage private AKS clusters with proper RBAC, cert-manager, ingress controllers and namespace isolation, implementing Kubernetes resources using Terraform (not kubectl) following GitOps principles.
• Develop, customize and manage Helm charts for application deployments, integrate external Helm charts via the Terraform Helm provider, and manage chart versioning.
• Build and maintain Azure DevOps YAML pipelines and reusable pipeline templates (stages, jobs, steps) that integrate with config-driven deployments.
• Develop and enhance config-driven deployment systems where YAML configurations generate Terraform tfvars and pipeline definitions, implementing schema validation and maintaining config generators.
• Write production-quality PowerShell modules following structured patterns, with proper error handling, logging and testable code.
• Leverage AI coding agents (e.g., Claude Code, GitHub Copilot) to accelerate development, and contribute to prompt engineering and agent configuration.
• Support deployment across multiple client projects and environments (dev, uat, staging, production) with proper isolation, networking and security boundaries.
• Manage multi-tier container registry architecture (Artifactory, Central ACR, Environment ACR) with secure image promotion pipelines and digest-based deployments.
• Implement secure infrastructure patterns including private endpoints, network segmentation, managed identities, Key Vault integration and TLS certificate management via internal CAs.
• Write comprehensive Pester tests for PowerShell and ensure all infrastructure changes include appropriate test coverage, maintaining existing tests when modifying code.
• Maintain clear documentation for infrastructure patterns, deployment procedures and operational playbooks, and follow established coding standards.

What you'll need

• Bachelor's degree in Computer Science, Engineering or a related technical field.
• 5+ years of hands-on experience with infrastructure automation and DevOps practices in production environments.
• Strong proficiency in Terraform including module development, state management, workspace patterns and provider configurations, with experience using Terraform for Kubernetes resource management.
• Demonstrated experience with Azure services including AKS, ACR, SQL Managed Instance, Key Vault, Virtual Networks, Application Gateway and Managed Identities.
• Solid understanding of Kubernetes concepts including deployments, services, ingress, RBAC, Helm charts and cert-manager, with experience with private cluster configurations.
• Strong experience with Azure DevOps Pipelines (YAML-based), including template hierarchies, variable groups and service connections.
• Proficiency in PowerShell with knowledge of module development patterns, error handling and Pester testing.
• Demonstrated experience using AI coding agents (Claude Code, GitHub Copilot, Cursor or similar) as part of daily development workflow, comfortable with prompt engineering.
• Understanding of network security, private endpoints, managed identities, certificate management and secure secrets handling.

Nice to have

• Experience working in the Wealth Management or Financial Services industry with strong emphasis on compliance and audit requirements.
• Experience with config-driven infrastructure patterns and code generation.
• Familiarity with Windows and Linux container workloads in Kubernetes.
• Experience with F5 XC, NGINX ingress or similar ingress/load balancing solutions.
• Exposure to monitoring solutions such as Splunk, Prometheus or Grafana.
• Experience with Git workflows, pre-commit hooks and branch protection strategies.
• Azure certifications (AZ-104, AZ-400, AZ-305) or HashiCorp Terraform certification.
• Experience with Terragrunt or similar Terraform workflow tools.
• Track record of contributing to or maintaining AI agent configurations, custom instructions or team-wide AI tooling standards.
• Familiarity with Bash.