[Hiring] Azure Infrastructure & CI/CD Pipeline Build

Summary

Azure Infrastructure & CI/CD Setup for Multi-Tenant SaaS Application

We're launching a multi-tenant SaaS product (Node.js/TypeScript)

and need a senior Azure engineer to build the full production

infrastructure and GitHub Actions deployment pipeline.

WHAT WE NEED BUILT:

Production environment:

• Azure App Service (Node.js) with staging + production slots
• Azure Database for PostgreSQL Flexible Server with pgvector
• Azure Blob Storage (private, versioned)
• SSL + custom domain
• Auto-scaling rules

Development environment:

• Windows Server 2022 VM (D8s v3, 4 RDS users)
• Ubuntu GPU VM (NC4as T4 v3) with NVIDIA drivers installed

Networking & security:

• VNet with all resources on private network
• NSGs, private endpoints for database and storage
• Azure Key Vault for all secrets with managed identities
• CORS, rate limiting, security headers, TLS 1.2 minimum
• Database firewall (deny-all, allow App Service only)
• Resource locks on production resources
• Application Insights + Log Analytics

CI/CD pipeline (GitHub Actions):

• Push to branch → lint + typecheck + tests + npm audit
• Merge to main → build → deploy staging → health check → swap to production
• Auto-rollback on failure
• Branch protection (require PR, 1 approval, passing checks)
• Dependabot enabled

Monitoring:

\- 11 alert rules (app down, errors, slow response, DB CPU,

DB storage, DB connections, cost, SSL, failed logins,

deployment failures, GPU idle)

DELIVERABLES:

• Everything in Terraform or Bicep (no portal-only config)
• 24 deliverables with acceptance criteria (full SOW provided)
• Complete handoff documentation
• Walkthrough call with our team

WE PROVIDE:

• Azure tenant + subscription (created)
• GitHub org (created)
• Domain name (purchased)
• Windows Server license
• Full SOW document with detailed specs