Senior Azure DevOps Engineer

About the Company
About InCycle InCycle Software is a Microsoft Solutions Partner for Digital & App Innovation and Data & AI, and a GitHub Verified Partner. We work with enterprise and mid-market clients across Canada and the United States on four things: cloud strategy and governance, application modernization, modern engineering and DevOps, and analytics and AI. Our consultants are senior engineers first. They work in small teams on client engagements, often alongside Microsoft, and they are trusted to make technical decisions and see them through to production. We believe there is always a better way to build and deliver software, and we are hired to find it.

About the Role
Senior Azure DevOps Engineer Remote, Canada (home office, with occasional travel to client sites)
· Permanent, full-time employee
· Senior level, 5+ years InCycle Software is hiring Senior Azure DevOps Engineers across Canada to help our clients ship software faster and more safely on Microsoft Azure. You will design and build CI/CD pipelines in Azure DevOps and GitHub Actions, automate cloud infrastructure with Terraform and Bicep, run containerized workloads on AKS, and bring modern engineering practices to teams that are modernizing how they deliver software. This is a hands-on engineering role with a consulting mandate: you build it, you ship it, and you stay close to the people who will run it. The role You will be the DevOps and platform lead on client engagements, from assessment through implementation and handover. A typical engagement lasts three to nine months and might include migrating a client from Jenkins or TFS to Azure DevOps or GitHub, standing up a landing zone and infrastructure-as-code foundation in Canadian Azure regions, containerizing a .
NET or Java application portfolio onto AKS, or building the release and observability practices a team needs to deploy daily instead of quarterly. You will usually be on one or two engagements at a time, with clients in Canada and, on occasion, the United States. Between engagements, you contribute to pre-sales scoping, internal tooling, and InCycle's own practices and accelerators. You report to the Practice Lead, Modern Engineering. Responsibilities
• Design, build and maintain CI/CD pipelines in Azure DevOps (YAML pipelines) and GitHub Actions, including build, test, security scanning, artifact management and multi-environment deployment.
• Automate Azure infrastructure with Terraform and Bicep, using modular, reviewed, versioned infrastructure-as-code for landing zones, networking, identity, Key Vault, storage, App Service, Functions and data services.
• Containerize applications with Docker and run them on Azure Kubernetes Service (AKS) or Azure Container Apps, with Helm, GitOps (Argo CD or Flux) and proper secrets, scaling and ingress patterns.
• Lead DevOps toolchain migrations, including Jenkins, TFS, TeamCity, Bitbucket or GitLab to Azure DevOps or GitHub, with branch strategy, work-item and repo migration, and team enablement.
• Build observability into every delivery: Azure Monitor, Application Insights, Log Analytics, alerting and SLOs, so teams can see and trust what they ship.
• Embed DevSecOps practices: GitHub Advanced Security, Microsoft Defender for Cloud, dependency and container scanning, policy-as-code with Azure Policy, and least-privilege identity with Entra ID and managed identities.
• Design for Canadian data residency where clients require it, using Canada Central and Canada East regions and the governance controls that keep data in country.
• Run assessments of a client's current delivery practices and produce a prioritized, realistic roadmap, then deliver the first increments yourself.
• Coach client engineers through pairing, code review, runbooks and working sessions so the practices stick after you leave.
• Support pre-sales: scoping calls, estimates, statements of work and technical demos, typically one or two per month.
• Contribute to InCycle's accelerators, reference architectures and internal tooling, and share what you learn in blogs, webinars and lunch-and-learns. Qualifications
• Legal authorization to work in Canada. Required Skills
• 5+ years in DevOps, platform, site reliability or cloud engineering, with at least 3 years hands-on in Microsoft Azure in production.
• Deep experience with Azure DevOps and GitHub, including YAML pipelines, GitHub Actions, environments, approvals, templates and reusable workflows.
• Strong infrastructure-as-code skills in Terraform or Bicep, with Git-based workflows, state management and module design.
• Production experience with Docker and Kubernetes, ideally AKS, including networking, ingress, scaling and secrets.
• Solid scripting in PowerShell, Bash or Python, and enough .
NET or another application stack to work alongside developers credibly.
• Working knowledge of Azure identity, networking and security: Entra ID, RBAC, managed identities, VNets, private endpoints, Key Vault.
• A track record of taking a delivery problem from diagnosis to a working solution in production, and of explaining the trade-offs to both engineers and executives.
• Clear written and spoken English, and the professionalism to represent InCycle in front of client leadership. French is an asset for engagements in Quebec and with federal clients. Preferred Skills
• Microsoft certifications such as AZ-400 (DevOps Engineer Expert), AZ-104, AZ-305 or AZ-500, or GitHub certifications (Actions, Advanced Security, Administration).
• Experience with Azure Landing Zones, Cloud Adoption Framework and enterprise-scale governance.
• GitOps with Argo CD or Flux, service mesh, or platform engineering work such as internal developer platforms and golden paths.
• Experience bringing GitHub Copilot or other AI-assisted engineering tools into a team's workflow, or with MLOps and data pipeline automation on Azure.
• Experience migrating from AWS or GCP to Azure, or running multi-cloud.
• Prior consulting or professional services experience, or having been the person a client team relied on during a transformation.
• Regulated-industry experience (financial services, healthcare, public sector, utilities) with controls such as SOC 2, PIPEDA, Protected B, ITSG-33 or the Government of Canada cloud guardrails.
• Eligibility for a Government of Canada Reliability Status or Secret clearance.
• Technologies you will work with Microsoft Azure, Azure DevOps, GitHub, GitHub Actions, GitHub Advanced Security, Terraform, Bicep, ARM, Docker, Kubernetes, Azure Kubernetes Service (AKS