DevOps Engineer Jobs in Chicago, IL

Role: Senior DevOps Engineer / Architect

Location: Chicago, IL (Hybrid)

Duration: 10 Months

Important Notes

Local candidates to Chicago, IL only.
Candidates must provide a valid LinkedIn profile and location proof.
* Only genuine candidates will be considered. Fake profiles or misrepresented candidates will be disqualified, and the submitting vendor may be removed from consideration.

Position Overview

We are seeking a Senior DevOps Engineer/Architect to design, build, and secure a cloud-native immutable evidencing platform on Microsoft Azure. This platform will ingest compliance artifacts, audit evidence, and control attestations from multiple enterprise systems through APIs, securely store them with cryptographic integrity guarantees, and provide retrieval capabilities for Governance, Risk, and Compliance (GRC) and audit workflows. The ideal candidate will have deep expertise in Azure cloud services, DevOps automation, Infrastructure as Code (Terraform), API Management, security best practices, and event-driven architectures while ensuring compliance with PCI-DSS, SOX, and GLBA standards.

Required Education

* Bachelor's degree in Computer Science, Information Management, Information Technology, or a related field.

Preferred Certifications (Nice to Have)

Azure Security Engineer Associate
AWS Certified Security - Specialty
CISSP
CCSP

Required Technical Skills

5+ years of experience designing and supporting production workloads on Microsoft Azure using event-driven and API-first architectures.
Strong experience with Azure API Management (APIM) including:
- Inbound and outbound XML policies
- Backend configuration
- Named values
- Developer Portal
- API versioning
Experience implementing immutable or append-only storage solutions, including:
- Azure Blob Storage WORM policies
- Azure Cosmos DB Change Feed auditing
- Equivalent immutable storage architectures
Hands-on experience deploying and managing Azure Cosmos DB and other NoSQL databases.
Experience implementing envelope encryption using Azure Key Vault, including:
- Customer Managed Keys (CMK)
- Key rotation
- Purge protection
Strong understanding of Zero Trust networking, including:
- Private Endpoints
- VNet Integration
- NSG and UDR configurations
Strong Terraform expertise, including:
- Modular Infrastructure as Code
- Remote State Management
- Azure Provider
- CI/CD integration with GitHub Actions and Azure DevOps
Strong programming skills in Python and Node.js.
Experience with integrated testing frameworks and automation tools.
Ability to write Kusto Query Language (KQL) queries for:
- Operational reporting
- Alerting
- Audit log analysis
* Experience integrating with third-party APIs such as:
- GRC platforms
- Vulnerability management tools
- Ticketing systems
- Enterprise application APIs

Required Soft Skills

Excellent written and verbal communication skills.
Strong collaboration skills with cross-functional technical and business teams.
* Ability to work independently in a fast-paced Agile environment.

Key Responsibilities

Design and implement secure API ingestion pipelines using Azure API Management (APIM) with OAuth2/JWT authentication, rate limiting, and schema validation.
Develop event-driven ingestion workflows using Azure Service Bus and Azure Functions, including Durable Functions and fan-out patterns.
Build immutable artifact storage solutions using:
- Azure Blob Storage with WORM retention policies
- Azure Cosmos DB for tamper-evident metadata indexing
Design and optimize Azure Redis Cache to support high-throughput query performance while maintaining immutable source-of-truth architecture.
Implement secure encryption using Azure Key Vault, including Customer Managed Keys (CMK) and automated key rotation.
Develop monitoring and observability solutions using Azure Log Analytics Workspace for:
- Ingestion events
- Access auditing
- Integrity verification
- Operational monitoring
Develop and maintain Infrastructure as Code (IaC) using Terraform, ensuring all infrastructure is policy-compliant with no manual ("click-ops") deployments.
Build and maintain integrations with third-party enterprise platforms to automate ingestion of compliance evidence and audit artifacts.
Ensure all platform components adhere to enterprise security standards and regulatory requirements, including PCI-DSS, SOX, and GLBA*.