DevOps Engineer

Business Services

DGS India - Pune - Indiqube Orchid

About the job

Azure DevOps Engineer

The purpose of this role is to design, automate, secure and operate Azure cloud infrastructure for privacy-compliant clean-room and audience activation solutions. The Azure DevOps Engineer will work with cloud architects, Databricks engineers, backend developers, QA engineers, privacy specialists and infrastructure teams to establish repeatable environments, deployment pipelines, private connectivity, identity controls, observability and production support for data ingestion, matching, segmentation, audience management and activation workflows.

Job Title: Azure DevOps Engineer

Job Description:

About Dentsu

Led by Dentsu Group Inc. (Tokyo: 4324; ISIN: JP3551 520004), a pure holding company established on January 1, 2020, the Dentsu Group encompasses two operational networks: dentsu japan network, which oversees Dentsu’s agency operations in Japan, and dentsu international, its international business headquarters in London, which oversees Dentsu’s agency operations outside of Japan.

With a strong presence in approximately 145 countries and regions across five continents and with 65,000 dedicated professionals, the Dentsu Group provides a comprehensive range of client-centric integrated communications, media and digital services through its five leadership brands-Carat, dentsu X, iProspect, Dentsu Creative, and Merkle-as well as through Dentsu Japan Network companies, including Dentsu Inc., the world’s largest single brand agency with a history of innovation. The Group is also active in the production and marketing of sports and entertainment content on a global scale.

About CXM (Merkle)

Merkle is a leading data-driven customer experience management (CXM) company that specializes in the delivery of unique, personalized customer experiences across platforms and devices. For more than 30 years, Fortune 1000 companies and leading nonprofit organizations have partnered with Merkle to maximize the value of their customer portfolios. The company’s heritage in data, technology, and analytics forms the foundation for its unmatched skills in understanding consumer insights that drive hyper-personalized marketing strategies. Its combined strengths in performance media, customer experience, customer relationship management, loyalty, and enterprise marketing technology drive improved marketing results and competitive advantage. With 12,000 employees, Merkle is headquartered in Columbia, Maryland, with 50+ additional offices throughout the Americas, EMEA, and APAC. Merkle is a dentsu company.

Key responsibilities:

• Translate approved clean-room architecture, cloud security standards, privacy requirements and operational controls into an executable and reusable Azure platform design.

• Provision and maintain reusable Azure infrastructure using Terraform, with Bicep where required, including resource groups, virtual networks, network security groups, Private DNS, private endpoints, storage or ADLS, Azure SQL and approved application-hosting services.

• Deploy and operate the persistent standalone Azure backend service used for audience workflow orchestration, approvals, traceability and audit logging. Azure Functions or Service Bus should be introduced only where approved through detailed architecture design.

• Automate Azure Databricks platform and workload deployments, including workspace configuration, Unity Catalog integration, cluster policies, permissions, secret access, jobs, diagnostic settings and secure connectivity to approved source and platform data stores.

• Build and manage CI/CD pipelines for infrastructure, Databricks workloads, backend APIs and the Azure-hosted Audience Builder across development, SIT, UAT and production, with approval gates, automated validation, controlled promotion and rollback.

• Implement identity, key and secrets management using Microsoft Entra ID, service principals, managed identities, role-based access control and Azure Key Vault, including secure management and rotation of HMAC or hashing keys, certificates and API credentials.

• Enforce the clean-room trust boundary through private networking, firewalls, Private Link, allow-listed egress, encryption and cross-tenant connectivity controls, ensuring that only approved data and audience outputs can leave the controlled environment.

• Enable secure integration between audience-management applications, backend APIs, audience segment stores, connector services and approved publisher activation endpoints, while keeping credentials and environment-specific configurations isolated.

• Implement end-to-end monitoring, centralised logging and immutable audit trails for ingestion, Databricks processing, matching, segmentation, approvals, exports and activation. Maintain dashboards, alerts, backup and recovery, runbooks, incident procedures, cost controls and operational handover documentation.

Qualifications:

• Bachelor’s degree in Engineering, Computer Science or a related technical field, with at least 6 years of hands-on experience in DevOps, cloud engineering, platform engineering or site reliability engineering at DCF 35 level.

• Strong hands-on experience with Microsoft Azure, including virtual networks, Private Link, network security groups, Private DNS, storage or ADLS, Azure SQL, virtual machines or approved managed compute, Azure Monitor, Log Analytics, Key Vault and Microsoft Entra ID.

• Proven infrastructure-as-code experience using Terraform, including reusable modules, remote state, policy controls and environment-specific configuration. Practical experience with Bicep or ARM templates is an advantage.

• Strong CI/CD experience with Azure DevOps, GitHub Actions or Jenkins, including gated releases, secrets handling, automated testing, artefact management, environment promotion and rollback.

• Experience automating Azure Databricks configuration and deployments using Databricks Asset Bundles, CLI, REST APIs or equivalent tooling. Knowledge of Unity Catalog, cluster policies, service principals and Databricks audit logs is strongly preferred.

• Experience deploying and operating secure Linux-based backend services, APIs, containers or virtual machines, supported by automation in Bash, PowerShell or Python and disciplined Git-based engineering practices.

• Strong understanding of cloud security, least-privilege identity, encryption, HMAC or key management, private networking, observability, backup, disaster recovery and production incident management.

• Experience supporting privacy-sensitive data platforms, data clean rooms, audience platforms or regulated workloads is preferred, including data residency, retention and deletion controls, evidence of security controls and operational support across multiple environments.

Dentsu Values

Will live the dentsu 8 Ways at all times: We Dream Loud, We Inspire Change, We Team Without Limits, We All Lead, We Make It Real, We Climb High, We Choose Excitement, We Are A Force For Good

Inclusion and Diversity

We’re proud to be different and that starts with our people. We believe in equal opportunities for everyone.

We won’t define people by their race, gender, sexual-orientation, age or disability. Individuality is what makes us great, we want everyone to bring their full self to work and create something amazing. That’s what we care about.

So, whether you’re joining us, or looking to move to a different part of the business, we work hard to make sure we create equal opportunities for everyone.

Keeping connected

Please visit our website to find out more and connect with us - www.dentsu.com