Senior Engineer - DevOps

Essential Job Functions: Collaborate with development teams to design and implement CI/CD pipelines that automate building, testing, and deployment for .NET APIs and Node/Nx monorepos. Build and maintain Azure infrastructure including App Service, Functions, APIM, Front Door, Load Balancers, VNets, Key Vault, SQL, Storage, and ACR. Automate deployment and configuration of applications and infrastructure using Terraform, Bicep/ARM, PowerShell, and Bash; drive IaC best practices and environment modularity (dev/qa/beta/prod). Manage CI/CD tooling and runners: Azure   DevOps   Pipelines (multi-stage YAML, environments, approvals), GitHub Actions, and self-hosted agents. Troubleshoot issues related to application deployment, runtime, networking, and infrastructure performance across the full stack. Monitor and maintain availability, scalability, and security using Azure Monitor, Application Insights, Log Analytics, and alerting best practices. Lead runtime upgrade programs (.NET runtime upgrades, Node LTS, Docker base image refreshes) and coordinate APIM integrations. Run operational programs such as monthly server patching (SCCM + Qualys) and drive automation to reduce manual effort. Own secrets and identity management: migrate secrets to Key Vault, manage service principals and managed identities, and integrate with Entra ID and RBAC. Implement and operate security remediation and automation workflows using tools such as Qualys, Mend, and Wiz; actively manage and reduce the vulnerability backlog. Collaborate with architects as a core contributor to the Architecture Review Board and change management processes. Provide on-call/incident response leadership, conduct RCAs, and drive post-incident improvements. Mentor and onboard new hires; provide ongoing technical guidance and support to app-dev teams.   Essential Skills & Experience: 8+ years’ experience in   DevOps /SRE with at least 6 years hands-on Azure   DevOps   experience. Strong Azure platform experience: App Service, Functions, APIM, Front Door, Load Balancers, VNets, Key Vault, Monitor, Log Analytics. Proven expertise with Terraform and Bicep/ARM; experience implementing policy-as-code (OPA/Conftest, Azure Policy) is beneficial. Deep experience with Azure   DevOps   Pipelines (multi-stage YAML, environments, library groups) and familiarity with GitHub Actions. Proficient scripting skills in PowerShell and Bash; working knowledge of .NET (C#) and Node.js build pipelines. Container experience with Docker and ACR; familiarity with containerized IoT Edge workloads is a plus. Solid understanding of identity and security patterns: Entra ID, managed identities, Key Vault patterns, service principals, RBAC. Demonstrated troubleshooting skills across CI/CD, application runtime, network, and infrastructure layers. Experience with patch management, capacity planning, and performance engineering projects. Hands-on experience with vulnerability management tooling and processes (Qualys, Mend, Wiz) and proven ability to drive remediation programs. Potential Certifications: Azure   DevOps   Engineer Expert (AZ-400) — highly desirable. Azure Solutions Architect Expert (AZ-305) — a plus. Azure Administrator (AZ-104), Azure Security Engineer (AZ-500), or other relevant Azure certifications — beneficial.

Experience with Azure IoT Edge or comparable edge platforms. Experience with Azure Arc and policy-as-code tooling. VM stack / virtualization knowledge (Hyper-V, VMware, or equivalent) and on-prem VM migration experience. Exposure to Azure Data services (Azure Data Factory, Synapse/SQL DW). Familiarity with managed identity transitions, private endpoints, and Zero Trust networking patterns. We Don’t Just Build The World, We Build Innovative Technology Too. Joining the Stanley Black & Decker team means working in an innovative, tech-driven and highly collaborative team environment supported by over 43,500 professionals in 60 countries across the