Senior DevSecOps

EnerSys is a global leader in stored energy solutions for industrial applications. We have over thirty manufacturing and assembly plants worldwide servicing over 10,000 customers in more than 100 countries. Worldwide headquarters are located in Reading, PA, USA with regional headquarters in Europe and Asia. We complement our extensive line of Motive Power and Energy Systems with a full range of integrated services and systems. With sales and service locations throughout the world, and over 100 years of battery experience, EnerSys is the power/full solution for stored DC power products. Motive Power applications include industrial lift trucks and pallet jacks, rail equipment, mining equipment, and airline ground support equipment. Some of the motive power brands include Hawker, Ironclad, General Battery, and Fiamm. Wherever there is a need for motive power, EnerSys offers the perfect energy solution. Job Purpose We are looking for a senior, hands-on platform engineer to own the reliability, security and operational maturity of our Azure and Kubernetes platform. You will work within our platform team, in partnership with the DevOps Team Lead, architecture, engineering, cybersecurity and data/ML teams, to build secure-by-default cloud infrastructure and support the safe operation of emerging AI workloads.   Role impact In this role, you will directly influence uptime, performance, cloud security posture and customer experience on Azure. You will also help define how the organization safely runs AI-enabled workloads in production, while evolving the engineering culture toward reliability-first, security-by-default, cloud-native delivery. Essential Duties and Responsibilities 1. Azure, AKS and platform reliability  Design, build and operate secure, highly available Azure cloud architecture for microservices, event-driven systems and AI-related workloads. Define and improve SLIs, SLOs, error budgets, resilience patterns and operational standards for production services.  2. Kubernetes platform engineering and automation  Operate production and non-production AKS clusters, including node pools, upgrades, autoscaling, RBAC, network policies, resource quotas and isolation patterns.  Automate provisioning and lifecycle management using Infrastructure as Code, GitOps, Helm and Kustomize.  3. Platform security and DevSecOps  Own Azure and AKS security posture across identity, networking, secrets, policy, vulnerability management and software supply chain controls.  Embed security into CI/CD pipelines through scanning, policy-as-code, deployment gates, audit logging and automated response patterns.  4. API gateways, ingress and service traffic  Design and operate Kubernetes API gateway and ingress layers, ideally using Apache APISIX or a similar platform such as Kong.  Implement routing, load balancing, rate limiting, OAuth2/OIDC, JWT, mTLS, traffic controls and API lifecycle standards.  Essential Duties…