The Role: Azure DevOps Engineer
Reporting to the Senior Director, AI and Engineering, working alongside IT operations, architecture, and delivery teams, the Azure DevOps Engineer is responsible for the CI/CD pipelines, release automation, and cloud platform tooling that support Rexall's Azure-hosted digital properties. The primary focus is delivering standardized, secure, and scalable pipelines across Dev, QA, and Production environments, and continuously improving how code and infrastructure reach production.
Working closely with Solution Architects, Backend and Frontend Developers, Cybersecurity, and Infrastructure teams, the Azure DevOps Engineer translates solution architecture and operational requirements into YAML-driven Azure DevOps pipelines, Terraform modules, and containerized deployment configurations. They maintain container build workflows, manage Azure Container Registry integrations, and drive platform observability, release velocity, and recoverability across Rexall's digital estate.
Principal Responsibilities: - Design, implement, and maintain CI/CD pipelines in Azure DevOps across Dev, QA, and Production environments for Rexall's digital properties.
- Define and enforce pipeline standardization, including reusable YAML templates, pipeline libraries, variable groups, service connections, and environment gates.
- Build and maintain container build and push workflows integrated with Azure Container Registry (ACR), including tagging strategy, vulnerability scanning, and retention policies.
- Automate deployments to Azure Container Apps, AKS, and App Services, supporting blue/green, canary, and rollback strategies.
- Develop and maintain Infrastructure-as-Code using Terraform (and ARM/Bicep where required) for Azure networking, compute, storage, messaging, and security resources.
- Integrate pipelines with Azure Key Vault for secret management and with Microsoft Entra ID for identity-based access to pipeline and runtime resources.
- Implement pipeline-level security controls - SAST, SCA, container image scanning, secret scanning, and policy-as-code for IaC.
- Configure observability for deployed workloads using Azure Monitor, Application Insights, and Log Analytics; maintain dashboards, alerts, and diagnostic settings.
- Operationalize Rexall's disaster-recovery standards: ensure every service has a validated IaC baseline, backup configuration, and a repeatable restore path.
- Support release management and production deployments, including cutover coordination, post-deployment monitoring, and rollback execution.
- Troubleshoot build, release, infrastructure, and runtime issues; perform root-cause analysis and drive permanent fixes.
- Document pipeline architecture, runbooks, and deployment procedures; contribute to the team's technical knowledge base.
- Participate in Agile ceremonies and contribute to sprint-level estimation for DevOps work.
- Provide after-hours support as required for releases, incident response, and DR exercises.
- Perform other duties as assigned to support Rexall Pharmacy Group.
Knowledge, skills and experience:- University degree or College Diploma in Computer Science, Information Technology, Engineering, or a related discipline.
- 5+ years of hands-on experience in a DevOps, Site Reliability, or Platform Engineering role, with at least 3+ years focused on Microsoft Azure.
- Deep expertise with Azure DevOps (Repos, Pipelines, Artifacts, Boards), including multi-stage YAML pipelines, reusable templates, service connections, and environment approvals.
- Hands-on experience with Infrastructure-as-Code using Terraform (preferred) and/or ARM/Bicep, including module design and remote state management.
- Proven experience deploying and operating workloads on Azure Container Apps, Azure Kubernetes Service (AKS), Azure App Service, and Azure API Management.
- Strong working knowledge of Docker, container build optimization, and Azure Container Registry.
- Experience with Azure networking: VNets, subnets, NSGs, Private Endpoints, Private DNS Zones, and Application Gateway / WAF.
- Working knowledge of Azure backup and DR constructs: Recovery Services Vaults, Backup Vaults, AKS Backup, and PITR for Azure SQL and MySQL.
- Scripting proficiency in PowerShell and/or Bash; comfort with the Azure CLI.
- Experience integrating pipelines with security tooling (SAST, SCA, container and secret scanning) and implementing policy-as-code.
- Solid understanding of identity in Azure: Entra ID, service principals, managed identities, and RBAC.
- Comfort supporting polyglot build stacks (e.g., .NET/C#, Node.js) and containerized microservices.
- Experience working in Agile / Scrum environments with cross-functional delivery teams.
- Strong troubleshooting and root-cause analysis skills across build, release, networking, and runtime layers.
- Excellent written and verbal communication.
- Relevant certifications are an asset (e.g., Microsoft Certified: DevOps Engineer Expert, Azure Administrator Associate, Azure Solutions Architect Expert, Terraform Associate).
- Experience in Healthcare, Pharmacy, or Retail - particularly with PHI/PII/PCI handling - is preferred.
