Remote DevOps Engineer – Azure Cloud Platform

About the role

Elevate Patient Financial Solutions is seeking a Remote DevOps Engineer to design, deploy, and support its Azure cloud platform. The role focuses on secure networking, infrastructure‑as‑code, CI/CD pipelines, and operational reliability within a regulated healthcare environment.

Key responsibilities

• Design, implement and maintain Infrastructure‑as‑Code using Bicep, Pulumi (preferred) and/or Terraform.
• Build reusable, version‑controlled infrastructure patterns for development, test, and production.
• Design, deploy and support private Azure networking architectures, including VNets, subnets, Private Endpoints, Private Link, and Private DNS zones.
• Configure hub‑and‑spoke and segmented network models with restricted public access.
• Create and manage Azure DevOps CI/CD pipelines for application and infrastructure deployments, embedding security controls and approval gates.
• Implement automated deployment, rollback, and recovery strategies aligned with change‑management and audit requirements.
• Improve platform reliability through monitoring, alerting, and incident response collaboration.
• Ensure compliance with SOC 2, HIPAA, and internal security policies, enforcing least‑privilege access and segregation‑of‑duties.
• Document standards, runbooks, and collaborate with Infrastructure, Development, Security, and Data teams.

Required profile

• Proven experience designing and operating Azure cloud environments in regulated industries.
• Strong background in Infrastructure‑as‑Code and automation tools.
• Hands‑on experience with secure private networking and DNS management.
• Ability to build and maintain CI/CD pipelines with built‑in security and compliance checks.
• Collaborative mindset to work across multiple technical and compliance teams.

Required skills

• Microsoft Azure
• Bicep
• Pulumi
• Terraform
• Azure DevOps
• CI/CD pipeline development
• Virtual Networks (VNets) and subnet design
• Azure Private Endpoints & Private Link
• Private DNS zones
• Hub‑and‑spoke networking architecture
• Role‑Based Access Control (RBAC)
• Monitoring and alerting (e.g., Azure Monitor)