Stellenbeschreibung:

Project Overview
We are NOVELDO AI, building an Azure-based AI product (AskSopia). Our product is already running, but we need a clean, professional separation of development, test, and production environments and a proper process to move changes between them.

We’re looking for an experienced Azure DevOps Engineer who can deliver this as a focused project in ~2 weeks.


Deliverables

1. Environment Setup
   • 3 separate subscriptions (dev, tst, prod) under our tenant.
   • Apply consistent naming conventions and tags (env=dev|tst|prod, app=asksopia).
   • Network isolation (hub/spoke or equivalent), with private endpoints for sensitive services.
   • Key Vault per environment; all apps to use Managed Identity.


2. Infrastructure as Code (IaC)
   • Bicep (preferred) or Terraform templates for all resources (App Service, Storage, Azure OpenAI, Cognitive Search, Key Vault, etc.).
   • Parameter files for environment-specific configs.


3. CI/CD Pipelines (Azure DevOps or GitHub Actions)
   • Infrastructure pipeline: multi-stage (dev → tst → prod) with approvals.
   • Application pipeline: build once, deploy via artifact to dev (auto), tst (approval), prod (approval).
   • Integrate smoke tests and rollback where possible.


4. Governance & Security
   • Role-based access: Contributor in dev only; tst/prod managed via pipelines.
   • Azure Policies (deny public endpoints in tst/prod, enforce tags, etc.).
   • Secrets managed exclusively in Key Vault.


5. Monitoring
   • Application Insights + Log Analytics in each environment.
   • Alerts for outages, errors, and cost thresholds.


6. Handover
   • Architecture diagram of the setup.
   • Deployment runbook (“How to promote changes dev → tst → prod”).
   • 60–90 min recorded handover session.


Success Criteria

• Clean, reproducible deployments for all environments.
• No manual portal changes in tst/prod.
• IaC repo + pipelines fully documented and tested with at least one end-to-end release.
• You leave us with a working, maintainable system we can operate without you.


Requirements

• Proven experience setting up Azure landing zones / multi-env architecture.
• Strong with Bicep or Terraform, Azure DevOps pipelines (YAML).
• Familiar with App Service, Azure OpenAI, Cognitive Search, Storage, Key Vault, Managed Identities.
• Able to work independently and deliver within 2 weeks.
• Good documentation and handover skills (English).


Budget & Timeline

• Fixed price (please propose).
• Timeline: ~2 weeks total.
• Availability for quick sync calls in CET business hours preferred.


How to Apply
Please include:
1. Example of a similar Azure multi-env project you’ve set up.
2. Your preferred IaC tool and why.
3. A short outline of your approach to separate dev/tst/prod in Azure.

NOTE / HINWEIS:

EN: Please refer to Fuchsjobs for the source of your application

DE: Bitte erwähne Fuchsjobs, als Quelle Deiner Bewerbung