DevOps Engineer

Welcome to Natus Sensory India We are continuing to grow our business in India and are now looking to expand our team there. Be part of this exciting journey right from the start!

Natus Sensory India are a leading manufacturer of medical devices and software for a range of solutions, including eight sensory nervous systems. Our mission is to improve patient outcomes in target markets through innovative screening, diagnostic and treatment solutions. We manufacture and distribute a range of medical device products used in the diagnosis of human disorders of sensory system and neural pathways.

Position Summary The Azure Cloud and CI/CD Subject Matter Expert owns the architecture, engineering, automation, security, governance, cost optimization, and operational maturity of Microsoft Azure environments and software delivery platforms. This hands-on role establishes cloud and Dev SecOps standards, builds reusable infrastructure and deployment patterns, and partners with application, security, finance, product, and operations teams to deliver secure, resilient, observable, and cost-effective services.

CRITICAL PRIORITY - AZURE COST SAVINGS: Continuously identify, quantify, prioritize, and deliver measurable Azure savings while protecting availability, security, performance, and business requirements.

Key Responsibilities

• Serve as the technical authority for Azure architecture, platform engineering, networking, identity, security, governance, resiliency, and operations.
• Design and implement landing zones, management-group and subscription structures, resource organization, naming, tagging, policy, and role-based access-control standards.
• Build and maintain CI/CD pipelines using Azure DevOps and/or GitHub Actions for application, database, container, and infrastructure deployments.
• Develop reusable Infrastructure as Code using Terraform and/or Bicep/ARM, with version control, peer review, automated validation, testing, and controlled promotion between environments.
• Implement secure pipeline practices including workload identity or service connections, secrets management, artifact integrity, dependency scanning, SAST, container scanning, approvals, and separation of duties.
• Architect Azure networking, including VNets, subnets, NSGs, routing, private endpoints, Private DNS, VPN/ExpressRoute, Application Gateway, WAF, Load Balancer, and Azure Firewall patterns.
• Design identity and privileged-access solutions using Microsoft Entra ID, managed identities, RBAC, Conditional Access, MFA, PIM, and least-privilege principles.
• Establish monitoring and observability through Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, diagnostic settings, and actionable operational runbooks.
• Own Azure cost optimization and FinOps execution: establish budgets and alerts; analyze Cost Management, Advisor, utilization, and billing data; eliminate waste; right-size resources; schedule non-production workloads; optimize storage; and evaluate Reservations, Savings Plans, licensing, and architectural alternatives.
• Create a prioritized savings backlog with documented baselines, forecasts, owners, target dates, realized savings, avoided costs, and validation that changes do not introduce unacceptable operational or security risk.
• Lead technical reviews, troubleshoot complex deployment and cloud-platform issues, perform root-cause analysis, and drive durable corrective actions.
• Create architecture diagrams, pipeline standards, implementation guides, operational procedures, and evidence supporting security, compliance, and change management.
• Mentor engineers and collaborate with development, database, networking, security, quality, product, and vendor teams.

Required Qualifications

• Extensive hands-on experience architecting, implementing, securing, and operating enterprise Microsoft Azure environments.
• Expertise with Azure DevOps Pipelines and/or GitHub Actions, including YAML pipelines, templates, reusable workflows, environments, approvals, artifacts, variables, and release controls. Azure Cloud & CI/CD SME
• Confidential recruiting document JOB REQUISITION | CLOUD ENGINEERING & DEVOPS
• Strong Infrastructure as Code experience with Terraform and/or Bicep/ARM, including modules, remote state, dependency management, validation, and environment promotion.
• Deep knowledge of Azure networking, Microsoft Entra ID, RBAC, managed identities, Key Vault, Azure Policy, Defender for Cloud, and Azure Monitor.
• Experience with Azure compute and platform services such as Virtual Machines, App Service, Functions, AKS, Container Registry, Storage, SQL, and managed databases.
• Strong scripting and automation skills using PowerShell and Azure CLI; working knowledge of Bash, JSON, YAML, and REST APIs.
• Experience integrating security and quality controls into Git-based pipelines, including pull requests, code review, secret scanning, SAST, dependency/container scanning, policy gates, approvals, artifact versioning, rollback, and auditable deployment records.
• Ability to diagnose cross-platform problems and design for high availability, backup, disaster recovery, business continuity, scalability, performance, and cost optimization.
• Demonstrated experience delivering measurable Azure savings using Cost Management, Azure Advisor, budgets, tagging, right-sizing, Reservations, Savings Plans, Hybrid Benefit, storage lifecycle controls, and workload scheduling.
• Excellent documentation, stakeholder communication, technical leadership, and mentoring skills.

Preferred Qualifications

• Seven or more years in infrastructure, cloud, platform engineering, or DevOps, including at least four years of substantial Azure experience.
• Microsoft Azure and/or HashiCorp Terraform certification, supported by advanced production experience.
• Experience in regulated healthcare or another environment handling PHI, PII, or sensitive data, with knowledge of HIPAA, SOC 2, ISO 27001, NIST, or CIS controls.
• Experience with Kubernetes/AKS, Docker, Helm, GitOps, service mesh, or container-platform security.
• Experience creating cloud-cost dashboards, forecasts, showback/chargeback reporting, unit-cost metrics, and executive savings reports.
• Experience supporting tenant or subscription migrations, Azure Enterprise Agreement/billing structures, and multi-subscription governance.

Compensation and Benefits: Along with a competitive salary and performance-based incentives, we offer a comprehensive benefits package starting from day one, including medical insurance coverage for employees and their families, gratuity as per statutory norms, and paid time off in accordance with applicable labor laws.

Join Natus Sensory today. Confidence in every Sense. We Offer

• The role will start as a work-from-home remote position but will turn into a physical presence in an office role in Bangalore.
• Minimal travelling: less than 5%
• Collaborative and international environment with different cultures.
• English company language.
• Full ownership of testing of features and functionality.

EEO Statement Natus Sensory is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, veteran status, disability, sexual orientation, gender identity, or any other protected status.