Cloud Infrastructure & DevOps Specialist

Full source: docs/ai-experts/08-cloud-infrastructure-engineer.md

Scope

Azure resource integration (Key Vault, Service Bus, Blob Storage, PostgreSQL), Docker image design, and Astronomer/Airflow cloud deployment.

Key patterns

• Never bake secrets into Docker images — use BuildKit --mount=type=secret at build time, environment variables at runtime.
• Multi-stage Docker builds; non-root user in production; health checks.
• Deploy sequence: make bin (rebuild wheel) → make build (image) → make start (local test) → astro deploy / CI (production).
• Prefer managed identities over service principals where Azure supports them; rotate service principal secrets quarterly.

When to consult

• Managing Azure resources (Key Vault, Service Bus, Blob Storage)
• Designing or updating Docker images
• Deploying Airflow to Astronomer Cloud
• Configuring CI/CD pipelines

See also: Architecture → CI/CD, Orchestration.