We are seeking a Senior Azure DevOps Platform Architect to design, build, and validate a fully enterprise-ready Azure DevOps (ADO) platform with strong emphasis on multi-tenancy, security-by-design, automation, and scalable governance.
EU location is mandatory.
This role involves translating complex enterprise requirements into architecture, implementing a secure and standardized ADO platform, defining migration strategies, and validating solutions through pilots with early-adopter teams.
Start Date: 15 April 2026 English: Upper-Intermediate
What you will do:
1. Architecture & Stakeholder Alignment * Gather and translate enterprise, security, and compliance requirements into a target ADO platform architecture. * Define organization/project structures, governance models, guardrails, and operational processes for large-scale adoption. * Collaborate with engineering, security, compliance, and infrastructure teams to define platform standards and rollout strategy.
2. Platform Build (Design to Implementation) * Build ADO organizations/projects with enterprise-ready foundations: * Repos, pipelines, artifacts, templates, agent strategy, permissions. * Implement a robust multi-tenant design, including isolation boundaries, shared services, RBAC, and audit separation. * Develop reusable CI/CD blueprints (YAML templates, golden pipelines, onboarding packages).
3. Security-by-Design * Embed enterprise security requirements directly into CI/CD patterns via standardized controls: * SAST, SCA, secret scanning, DAST * Define policy enforcement (warnings vs. blocking), exception processes, and audit/evidence traceability. * Ensure secure connectivity patterns (service connections, identity, least privilege, credential handling).
4. Automation & Migration Approach * Develop automation for provisioning and onboarding: * Projects, repos, pipelines, permissions, service connections, etc. * Create migration playbooks including assessment, pilots, phased rollout, coexistence, and cutover strategies. * Execute pilot migrations with initial teams, refine patterns, and prepare for scale across the enterprise.
Mandatory Skills & Experience * Deep experience with YAML pipelines, repo management, agent pools, artifacts, RBAC, and enterprise governance. * Proven track record designing & implementing DevOps platforms at enterprise scale. * Strong understanding of isolation models, RBAC boundaries, tenant-specific policies, and audit requirements. * Ability to embed security controls into platform and CI/CD architecture while meeting enterprise compliance needs. * Hands-on experience integrating SAST, SCA, secret scanning, and DAST into automated CI/CD workflows. * Experience automating provisioning, onboarding, and CI/CD standardization (IaC, scripting, templating). * Experience defining and executing phased migration strategies with pilots, coexistence, and rollback planning. * Ability to produce high-quality architecture documentation, onboarding guides, and reference implementations.
This as a full-time position with 6 months engagement. Candidates must be located in EU.
