Senior DevOps Engineer

Department Overview

McDonald’s Global Technology is here to power tomorrow’s feel-good moments.  That’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae-dipped fry at a time. Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant. We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel-good meets fast-paced.  We’re recruiting engineers to join our Global Technology team in Mexico City as we open our McDonald’s Global Office in Mexico. Our Mexico City Office will be a hub for technology innovation and operational support to help us build the solutions that will improve our customer, crew and employee experience each and every day. Check out the McDonald’s  Global Technology Technical Blog to learn how technology and our global team are directly enabling the Accelerating the Arches strategy. 

Duties

As a Senior DevOps Engineer on our Identity and Access Engineering team, you will lead a small group of DevOps Engineers that play a key role in shaping our infrastructure-as-code, streamlining deployments, and ensuring the Engineer Team can build secure, observable, and resilient IA (identity and access) applications that protect critical information and resources. This is a phenomenal opportunity to continue to evolve and improve the global identity and access management platform at the world’s largest restaurant company!

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines using GitHub Actions, Azure DevOps.
• Build automation to create and manage Azure Subscription Deploy and manage cloud resource management platform for Azure.
• Integrate security tools and practices into the CI/CD lifecycle, including SAST, DAST, and SCA (e.g., Snyk).
• Manage secrets securely using Azure Key Vault and enforce secure coding practices across development teams.
• Support containerization strategies using Docker and orchestrate deployments using Kubernetes.
• Contribute to all aspects of the agile development life cycle including design, development, documentation, testing and operations.
• Fix and resolve technical issues related to the identity and access platform components.
• Participate in efforts to drive elimination of technical debt and continuous improvement in delivery speed, quality, value, and applied innovation.
• Provide mentorship and guidance to junior engineers.

Qualifications

• 5+ years of professional experience as a DevOps or DevSecOps Engineer, with a strong focus on automation and security.
• 3+ Years of hands-on experience with Azure DevOps Pipelines and GitHub Actions.
• 3+ Years supporting cloud native applications using Azure Kubernetes (AKS), Docker, Azure Functions, Logic Apps, Event Grid, and Service Bus.
• Experience implementing branching strategies (Git flow/Trunk) based, repository configurations (policies, security) and automation.
• Experience with Infrastructure as Code (IaC) using Terraform and ARM templates.
• Hands-on experience with Docker and Kubernetes for containerization and orchestration.
• Proven knowledge of Computer Science fundamentals (object-oriented design, data structures and algorithm) with specific focus on C# and .NET.
• Test automation with Unit Tests for including in pipeline.
• Proven leadership abilities in an engineering environment in driving operational precision and best practices.
• Excellent communication and interpersonal skills, with the ability to collaborate across remote teams and a global organization.

Preferred Qualifications

• Strong knowledge of identity and access management (IAM) concepts, protocols, and technologies, including but not limited to identity provisioning, authentication, authorization, RBAC, SSO, and federation.
• Experience with cybersecurity principles and best practices, including risk management, access controls, and secure coding principles.