Sr. Assoc, Devops Engineer

ABOUT REVANTAGE

Revantage, a Blackstone Real Estate portfolio company, is a global provider of corporate services.

With a corporate purpose of ‘In Pursuit of Better,’ Revantage delivers value-added services and world-class talent for Blackstone Real Estate portfolio companies, spanning diverse asset classes, including residential, logistics, office, hospitality and retail sectors. The company’s footprint extends across North America, Europe and Asia Pacific.

Creating a culture that inspires impact and momentum requires the right team. We know what it takes to lead an industry, and are looking for leaders who seek constant growth, want to excel, and continuously improve upon themselves and the industry.

In addition to supporting Revantage, we also recruit for Blackstone Real Estate portfolio companies, giving you the unique opportunity to work within a network of best-in-class professionals across a broad real estate platform.

India

With offices in Bengaluru and Gurugram, our teams in India deliver expertise, innovation and operational excellence that support thousands of assets across logistics, data centers, residential, commercial and hospitality.

Whether you’re building new capabilities, driving critical initiatives or strengthening partnerships, you’ll have the opportunity to truly Build What Matters.

Summary / Position Objective

The DevOps Engineer is responsible for building, automating, securing, and operating cloud infrastructure and delivery pipelines in Microsoft Azure, with a significant focus on infrastructure as code using Terraform and on the operation of the Databricks data platform. This position codifies infrastructure rather than clicking through portals, treats pipelines and environments as products, and is measured by the reliability, repeatability, security, and cost efficiency of what it builds.

Working as an integrated member of the Security and IT Operations organization alongside software developers, data engineers, cybersecurity engineers, and systems administrators, the DevOps Engineer partners early in the delivery lifecycle to make the secure path the easy path. This role also participates in on-call rotation, release and maintenance windows, and incident response for the platforms it owns. This position reports to the Director of IT Operations.

Critical Duties

Infrastructure as Code and Azure Platform Engineering

Design, write, review, and maintain Terraform code to provision and manage Azure infrastructure, including reusable modules, consistent naming and tagging standards, and version pinning of providers and modules.

Own Terraform state management, including remote backends, state locking, workspace and environment separation, drift detection, and safe remediation of drift without destructive changes.

Build and maintain Azure foundational infrastructure, including subscriptions and resource groups, virtual networks, subnets, network security groups, private endpoints, DNS, load balancing, and storage.

Implement guardrails as code, including Azure Policy, role assignments, resource locks, and budget and tagging enforcement, so environments are compliant by construction rather than by audit.

Manage environment promotion across development, test, and production with identical code paths and environment-specific configuration held outside of code.

Eliminate manual and portal-based infrastructure changes by bringing existing resources under Terraform management and documenting the exceptions that cannot be.

CI/CD and Release Engineering

Build, maintain, and optimize CI/CD pipelines (Azure DevOps Pipelines and/or GitHub Actions), including build, test, artifact publication, and multi-stage deployment with approvals.

Implement automated quality and security gates in pipelines, including linting, unit and integration test execution, Terraform plan review, static analysis, dependency scanning, and container image scanning.

Establish and enforce source control practices, including branching strategy, pull request review requirements, protected branches, and traceability from commit to deployed change.

Automate deployment and rollback so that releases are low-drama and reversible, and reduce lead time from merge to production.

Manage build agents, runners, service connections, and workload identity federation, eliminating long-lived credentials wherever possible.

Databricks and Data Platform Operations

Provision and manage Databricks workspaces and workspace configuration through Terraform rather than manual setup.

Administer Databricks platform operations, including cluster policies, instance pools, compute sizing, autoscaling, auto-termination, runtime version management, and job and workflow orchestration.

Implement and maintain Unity Catalog structure and governance, including metastore configuration, catalogs and schemas, external locations, storage credentials, and grants aligned to least privilege.

Integrate Databricks identity with Microsoft Entra ID, including SCIM provisioning of users and groups, and coordinate entitlement design with the Identity and Access Management team.

Secure the data platform, including secret scopes backed by Azure Key Vault, private connectivity to Azure Data Lake Storage, network isolation, and elimination of embedded credentials in notebooks and jobs.

Build CI/CD for data assets, including Databricks Repos or Git folders, notebook and job deployment automation, and environment-specific configuration for data pipelines.

Monitor platform health, job reliability, and cost; implement chargeback tagging, cluster cost controls, and alerting on runaway compute.

Partner with data engineering to troubleshoot job failures, performance problems, and Delta Lake and storage layer issues.

Observability, Reliability, and Automation

Implement and maintain monitoring, logging, and alerting using Azure Monitor, Log Analytics, and Application Insights, with alerts that are actionable and tuned to reduce noise.

Define and track service level indicators and objectives for owned platforms, and drive down recurring failure modes rather than repeatedly remediating them.

Write and maintain automation and tooling in PowerShell, Python, and/or Bash to eliminate repeatable operational work.

Build and operate containerized workloads where applicable, including Docker images, Azure Kubernetes Service, and container registry lifecycle and image hygiene.

Author and maintain runbooks, architecture diagrams, and operational documentation sufficient for another engineer to operate the platform unaided.

Participate in incident response for owned platforms, including triage, mitigation, restoration, and blameless post-incident review with corrective actions tracked to closure.

Design and validate backup, recovery, and business continuity capability for infrastructure and platform configuration, including periodic restore testing.

Security, Governance, and Cost

Apply DevSecOps practices throughout the pipeline, shifting security checks left and treating security findings as build-blocking defects rather than backlog items.

Implement least-privilege access using Azure role-based access control, managed identities, and workload identity federation; route all human entitlement and privileged access requests through the Identity and Access Management team in accordance with company policy.

Manage secrets and certificates in Azure Key Vault, including rotation, and remediate any secrets found in code, pipelines, or configuration.

Partner with Information Security on vulnerability remediation, cloud security posture findings (including Microsoft Defender for Cloud), hardening standards such as CIS benchmarks, and evidence for control reviews.

Follow change management for all production changes, including documented change records, tested rollback plans, and adherence to approved change windows.

Monitor and optimize cloud