DevOps Engineer

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins works with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic and labelling is accurate. Eurofins believes it is a global leader in food, environmental, pharmaceutical and cosmetics products testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, CDMO, advanced material sciences and in the support of clinical studies.

In over just 30 years, Eurofins has grown from one laboratory in Nantes, France to over 62,000 staff across a network of more than 1000 independent companies in over 62 countries and operating more than 900 laboratories. Eurofins offers a portfolio of over 200,000 analytical methods to evaluate the safety, identity, composition, authenticity, origin, traceability and purity of biological substances and products, as well as providing innovative clinical diagnostic testing services, as one of the leading global emerging players in specialised clinical diagnostics testing.

Deploy, and maintain production-grade infrastructure on Azure and AWS using Terraform and Terraform Cloud workspaces

Manage Azure Kubernetes Service (AKS) clusters running the IAM platform across multiple environments (dev->production)

Implement and maintain Infrastructure as Code (IaC) best practices for repeatability, version control, and disaster recovery

Oversee multi-workspace Terraform deployments with complex dependency management

Implement disaster recovery (DR) strategies across Azure and AWS regions

Manage and secure Azure platform services, including networking, identity, compute, and platform security controls

Deploy and manage containerized .NET 8 applications on Kubernetes using Helm charts

Implement autoscaling strategies using KEDA (Kubernetes Event-Driven Autoscaling) for Redis Streams and message processing workloads

Manage Kubernetes deployments including StatefulSets, Deployments, Services, ConfigMaps, and Secrets

Optimize container images using multi-stage Docker builds and implement container security best practices

Implement pod security policies, network policies, and RBAC controls

Deploy and manage self-hosted disaster recovery identity infrastructure in both Azure and AWS

Integrate identity federation, single sign-on (SSO), and OAuth/OIDC flows with the IAM platform

Use HashiCorp Vault for secrets management, dynamic credentials, and PKI infrastructure

Configure Vault PKI for certificate management, mTLS, and secure inter-service communication

Manage Redis TLS/SSL configurations and certificate rotation

Configure Azure Key Vault integrations where applicable

Implement security scanning, vulnerability management, and compliance controls

Build and maintain Azure DevOps Pipelines for continuous integration and deployment

Implement GitOps workflows and deployment automation

Create and maintain Makefiles and shell scripts for build, deploy, test, and cleanup automation

Implement automated testing strategies including Helm chart tests and integration tests

Ensure consistent security posture and compliance across cloud providers

Manage costs and resource optimization across multiple cloud platforms

QUALIFICATIONS AND EXPERIENCE REQUIRED:

5+ years of DevOps/SRE experience in production environments

Expert-level Terraform experience with Terraform Cloud, remote state, and workspace management

Production Azure experience (or another cloud provider) including AKS, Azure Database for PostgreSQL, Virtual Networks, Private Endpoints, and Managed Identities or equivalent services

Kubernetes proficiency including Helm, operators, custom resources, and cluster management

Docker expertise with multi-stage builds and container optimization

GitOps methodologies and declarative infrastructure

JAVA based application configuration and administration

KEDA autoscaling implementation and tuning is a plus

Experience with Redis (Streams, TLS/mTLS, clustering) is a plus

Apache ActiveMQ Artemis or similar message broker experience is a plus

Strong understanding of OAuth 2.0, OIDC, SAML, and federation protocols

Experience with Azure Entra ID (Azure AD) including app registrations, service principals, and conditional access or similar IDP offering

Experience with Ping Identity suite (Ping Identity, Ping Federate) is a plus

SailPoint IIQ or similar identity governance platform experience is a plus

PingOne AIC (Adaptive Identity Cloud) implementation experience is a plus

HashiCorp Vault production deployment and managementis a plus

PKI infrastructure, certificate lifecycle management, and mTLS is a plus

Azure DevOps Pipelines (YAML pipelines preferred)