• Design and maintain robust Azure cloud infrastructure and services, with familiarity in managing hybrid environments. • Architect network topology, security zones, and firewall rules for multi-tier application stacks. • Define and enforce Infrastructure as Code (IaC) standards across the organization using tools like ARM templates, Bicep, or Terraform. • Evaluate, select, and integrate Microsoft ecosystem tools including Azure DevOps, Azure Kubernetes Service (AKS), and Azure App Service to optimize cloud platform capabilities. • Design, build, and maintain multi-stage, secure, and resilient CI/CD pipelines using GitHub Actions and Azure Pipelines. • Own application build processes: manage dependency restoration, compilation, unit testing, and static analysis for modern software stacks (e.g., .NET, Node.js). • Own front-end pipelines: manage environments, dependencies, testing, and bundling for modern web frameworks (e.g., React). • Implement and enforce branching strategies (e.g., GitFlow, trunk-based development) and configure branch protection policies. • Implement and maintain sophisticated release gates with automated rollback triggers and advanced deployment strategies (e.g., canary, blue-green). • Manage reliable, automated, and scalable deployment to Azure services (e.g., AKS, App Service, Function Apps). • Implement and manage serverless and containerized deployment strategies in Azure. • Automate cloud resource provisioning and configuration using Azure-native tools. • Coordinate closely with network and security teams for critical cloud operations, including certificate management, Azure DNS configuration, and Azure Load Balancer/Traffic Manager setup. • Implement and manage comprehensive monitoring solutions using the Azure stack: Azure Monitor, Application Insights, and Log Analytics Workspaces. • Define, track, and report on SLIs (Service Level Indicators) and SLOs (Service Level Objectives), managing error budgets in collaboration with development leads. • Build actionable dashboards and detailed alert runbooks to support an efficient on-call rotation. • Implement standards for distributed tracing and structured logging across all services. • Integrate proactive DevSecOps practices: SAST (Static Analysis), DAST (Dynamic Analysis), dependency scanning, and secrets detection directly within the CI/CD pipelines. • Manage Azure Active Directory, define and enforce RBAC (Role-Based Access Control) policies, and secure sensitive data using Azure Key Vault integrations. • Ensure technical implementation is fully compliant with organizational security policies and relevant industry/regulatory requirements.