IN-Sr Technical Consultant - Cloud - AKS, Azure update manager, Azure automation, Patching, AZ-104 / AZ-400
Scope:
The Azure Infra Engineer - Patching & Maintenance keeps our Azure platform secure, current, and compliant by owning the end-to-end patch and maintenance lifecycle. This mid-level role runs the weekly patch cycle across compute, containers, and platform services, and proactively tracks every core component against vendor End-of-Life / End-of-Support timelines, upgrading to supported versions before support lapses. It is a hands-on operations role with a strong automation focus and close coordination with service owners, security, and DevOps.
Our current technical environment:
- Software: Azure Update Manager, Azure Automation, Azure Policy (Guest Configuration), PowerShell, Bash, and Azure CLI; ServiceNow for change management / CAB.
- Application Architecture: Microservices on AKS (Stratosphere), Portal Shell and Portal Collaboration runtimes, the Event Framework (Event Grid / Service Bus), IAM, and API Management (self-hosted gateway).
- Cloud Architecture: Microsoft Azure - Windows / Linux VMs, AKS node pools, MongoDB (Atlas), Entra ID / IAM, and APIM, with patch compliance and maintenance across every layer.
- Frameworks/Others: Kubernetes / Helm, Azure Monitor / Log Analytics, vulnerability & CVE remediation workflows, and EOL/EOS lifecycle tracking; WSUS / SCCM, Ansible / Terraform, and ITIL practices; AZ-104 / AZ-400 aligned.
What you’ll do:
- Plan and execute the weekly patch cycle for Windows/Linux VMs, AKS node pools, and platform middleware using Azure Update Manager and Azure Automation.
- Publish and maintain a rolling maintenance calendar, coordinating patch windows with service owners to minimise business disruption.
- Track OS, runtime, and dependency versions across IAM, APIM, MongoDB, Stratosphere, Portal Shell/Collaboration, and the Event Framework against vendor EOL/EOS timelines, and plan upgrade paths to supported or LTS versions well ahead of EOL.
- Test patches and upgrades in non-production and validate rollback procedures before every production rollout.
- Automate patch deployment and compliance reporting using Azure Update Manager, Azure Policy guest configuration, and Automation runbooks; monitor compliance dashboards and remediate non-compliant resources within SLA.
- Coordinate emergency, out-of-band patching for critical CVEs and zero-day vulnerabilities with the security team.
- Manage AKS cluster and node image upgrades, Helm chart bumps, and container base image refresh cycles; renew TLS certificates, keys, and secrets nearing expiry with the IAM team.
- Maintain patch and maintenance documentation (change records, rollback plans, validation checklists) and report weekly patch compliance and EOL risk status to engineering leadership.
What we are looking for:
- 5-8 years in infrastructure operations, patch management, or SRE roles, with proven ability to plan and execute maintenance windows at minimal service disruption.
- Hands-on experience with Azure Update Manager, Azure Automation, and Azure Policy guest configuration; patching Windows Server and Linux VM fleets at scale.
- Familiarity with AKS node image upgrades and Kubernetes version lifecycle management, plus EOL/EOS lifecycle tracking for OS, databases, and middleware.
- Experience with change management (ServiceNow CAB, scheduled maintenance windows) and vulnerability / CVE remediation workflows.
- Scripting skills in PowerShell, Bash, or Azure CLI for patch automation; AZ-104 or AZ-400 certification preferred.
- Nice to have: WSUS / SCCM, MongoDB Atlas automated upgrades, Ansible / Terraform, ITIL Foundation, and experience building EOL/EOS dashboards or CMDB integrations.
Our Values
If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
Skills Required
- 5-8 years in infrastructure operations, patch management, or SRE roles
- Hands-on experience with Azure Update Manager, Azure Automation, and Azure Policy guest configuration
- Patching Windows Server and Linux VM fleets at scale
- Familiarity with AKS node image upgrades and Kubernetes version lifecycle management
- Experience with change management (ServiceNow CAB) and vulnerability/CVE remediation workflows
- Scripting skills in PowerShell, Bash, or Azure CLI for patch automation
- AZ-104 or AZ-400 certification
- Experience with WSUS/SCCM, MongoDB Atlas automated upgrades, Ansible/Terraform, ITIL Foundation, or EOL/EOS dashboards/CMDB integrations
Blue Yonder Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Blue Yonder and has not been reviewed or approved by Blue Yonder.
-
Leave & Time Off Breadth — PTO is described as generous or “unlimited” in the U.S., alongside paid holidays, sick time, and two paid volunteer days. These policies are often highlighted as strengths that support work–life balance.
-
Flexible Benefits — Remote-work options and flexible arrangements are emphasized as part of the package. This flexibility is valued alongside compensation and can help offset middling pay for some roles.
-
Healthcare Strength — Medical, dental, and vision coverage are provided, with mental health/EAP support and HSA/FSA options referenced. These core coverages are portrayed as solid and comprehensive.
Blue Yonder Insights
What We Do
Blue Yonder is the world leader in digital supply chain and omni-channel commerce fulfillment. Our intelligent, end-to-end platform enables retailers, manufacturers and logistics providers to seamlessly predict, pivot and fulfill customer demand. With Blue Yonder, you can make more automated, profitable business decisions that deliver greater growth and re-imagined customer experiences. Blue Yonder - Fulfill your Potential Blue Yonder’s tagline “Fulfill Your Potential” reflects the company’s mission to empower every organization and person on the planet to fulfill their potential. Each day, our global teams of associates and business partners work together to accelerate global economic growth, increase sustainability and prosperity with a Sonoran Spirit.
