WHAT MAKES US A GREAT PLACE TO WORK
We are proud to be consistently recognized as one of the world’s best places to work. We are currently the top ranked consulting firm on Glassdoor’s Best Places to Work list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don’t happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.
WHO YOU’LL WORK WITH
Coro is Bain's persistent product development and engineering organization, building and operating the firm's proprietary digital solutions. Coro brings together technology, data, and services to create differentiated value for Bain's clients and case teams.
This role sits within Coro's DevOps and Assurance team, part of the Next Generation Software Solutions (NGSS) department. The team enables secure, efficient, and reliable delivery of technology across Bain's global ecosystem, focusing on both technical operations and platform assurance so that every deployment meets the firm's standards for quality, security, and compliance.
WHERE YOU’LL FIT WITHIN THE TEAM
The Senior Engineer helps build and operate the infrastructure, deployment automation, and operational reliability behind Coro's platforms. Working alongside architects and backend engineers, this engineer provisions and operates Azure infrastructure, builds and maintains CI/CD pipelines, and helps ensure services are deployed consistently, monitored effectively, and can scale as the build plan expands.
This is a delivery-focused role: the Senior Engineer executes well against established standards and patterns, takes ownership of the tasks assigned to them, and collaborates closely with the wider team. It is a critical foundational role in the early stages of the platform build, requiring strong technical fundamentals and the pragmatism to make infrastructure decisions that support a fast-moving product team.
WHAT YOU’LL DO
- Design, provision, and manage cloud infrastructure using Terraform and Terraform Cloud. Automate deployments to ensure scalability, consistency, and security across environments.
- Architect and manage Azure networking: VNet/subnet design, private endpoints, DNS resolution, NSG rules, and Front Door Premium configuration.
- Provision and maintain Azure platform services: App Services, Azure SQL, Azure OpenAI, Container Registry (e.g. Azure Container Registry, Cloudsmith), Key Vault, Entra ID, and Storage Accounts (ADLS Gen2).
- Collaborate with Bain's central cloud and infrastructure teams to refine shared processes, tooling, and approaches to operational work.
- Manage Azure Kubernetes Service (AKS) clusters, including node pools, scaling, spot instances, and workload connectivity to dependent services (databases, storage, AI services).
- Manage identity and access: Entra ID app registrations, managed identities, RBAC, and integration with external IdPs (Okta).
- Administer database platforms from an infrastructure perspective: Azure SQL Serverless, PostgreSQL Flexible Server, Cosmos DB, including connectivity, Entra auth, firewall rules, and private endpoints.
- Ensure robust access controls and platform reliability across dev, demo, and production environments.
- Build, optimize, and maintain CI/CD pipelines using GitHub Actions for container builds, infrastructure deployments, and application releases.
- Manage container image lifecycle: build, scan, push to a container registry (e.g. Azure Container Registry, Cloudsmith), and deploy to AKS or App Services.
- Implement environment promotion workflows with appropriate gating, secrets management (Key Vault), and rollback strategies.
- Design and operate GitHub-hosted private runners where required, including network integration with Azure VNets.
- Implement and operate observability using the team's monitoring stack (e.g. Datadog, Azure Application Insights). Monitor performance, resolve issues proactively, and optimize cost and reliability.
- Respond to security findings: triage, containment, IAM scoping, container image CVE remediation, and endpoint hardening.
- Handle L2/L3 incident escalations, including root-cause analysis, user journey tracing, and log analysis.
- Enforce solution compliance across products: network isolation, least-privilege access, secrets hygiene, and deployment guardrails.
- Maintain local development environments and deployment documentation so engineers across the distributed team can onboard quickly and operate with minimal infrastructure friction.
- Partner with architects, product engineers, and security teams to align on infrastructure standards and platform roadmaps.
- Promote DevOps culture, automation-first thinking, and continuous improvement across the NGSS engineering organization.
- Contribute to technical discovery, POCs, and innovation workstreams to validate new tools, technologies, and architectural patterns.
- Support team recruiting activities: resume screening, technical interviews, and candidate evaluation.
ABOUT YOU
Education & Experience
- Bachelor's or Master's degree in Computer Science, Engineering, or a related technical field.
- 4–6 years of experience in DevOps, infrastructure engineering, or cloud platform engineering roles.
- Proven track record of designing and operating cloud infrastructure in production environments.
- Demonstrated experience working with cross-functional engineering teams in fast-paced product organizations.
- Excellent communication and collaboration skills, with the ability to translate complex technical topics for diverse stakeholders.
- Proactive, analytical, and systematic, with strong problem-solving skills and the ability to trace issues across multiple layers (DNS, networking, identity, application).
- Results-driven with a bias for automation and continuous improvement.
- Familiarity with Agile methodologies and a commitment to team enablement.
- Hands-on experience with Terraform and Terraform Cloud (or equivalent): workspace management, state, modules, and remote backends.
- Strong proficiency in Azure services, including AKS, Networking (VNets, subnets, private endpoints, NSGs, DNS zones), App Services, Key Vault, Container Registry, and Storage Accounts.
- Experience with containerization technologies (Docker, Kubernetes) and container image lifecycle management.
- Expertise in roles, permissions, and IAM, particularly Microsoft Entra ID and Okta.
- Advanced skills in CI/CD automation using GitHub Actions, Azure DevOps, and related DevOps toolchains.
- Proficient in Linux administration and automation scripting (Bash, PowerShell, Python) for reusable workflows.
- Experience with monitoring and observability platforms (e.g. Datadog, Azure Application Insights).
- Familiarity with Azure private networking: private endpoints (blob, DFS, SQL, PostgreSQL), Private DNS Zones, and VNet integration for App Services and AKS.
- Competent in database deployment and management from an infrastructure perspective, Azure SQL Serverless, PostgreSQL Flexible Server, and Cosmos DB.
- Foundation in security remediation: container CVE patching, IAM scoping, NSG/firewall tightening, and WAF/Front Door rule management.
- Professional certifications such as Azure DevOps Engineer Expert, Azure Administrator, Terraform Associate, or CKA (or equivalent).
- Experience managing multi-environment governance, cost optimization, and compliance frameworks in cloud environments.
- Familiarity with Azure OpenAI, Cognitive Search, Databricks, and the integration of AI services into enterprise platforms.
- Experience with workflow orchestration tools (Airflow, or similar DAG/pipeline systems).
- Snowflake administration or connectivity from a DevOps lens.
- Experience with AI/ML observability tools such as LangSmith or Arize.
- Familiarity with AI coding assistants such as Cursor, Claude Code, or Codex to speed up development.
