Description

Responsibilities:

Refine, harden, and extend the IaC framework with Terraform and Terragrunt to improve consistency, maintainability, and quality.
Expand and standardize the Terraform module library for Azure with secure defaults, naming, tagging, and policy guardrails.
Establish and enforce IaC quality standards using TFLint, policy-as-code, validation, automated testing, and pre-merge checks.
Build the AI-assisted self-service platform by implementing an IaC MCP server and authoring agent skills and context for approved modules and standards.
Integrate IaC deployment pipelines with ServiceNow for automated change requests, approvals, and CMDB updates.
Design and implement self-service workflows, scaffolding, and golden paths through Port.io and related developer-portal tooling.
Build and maintain CI/CD and GitOps pipelines for infrastructure delivery.
Develop and maintain automation in PowerShell, Python, and Bash.
Manage identity, access, and authentication with Microsoft Entra ID (Azure AD), including RBAC and least-privilege patterns.
Partner with engineering teams to improve the self-service experience and remove provisioning bottlenecks.
Mentor platform team members and promote platform-engineering and self-service principles.
Ensure security, reliability, and compliance of infrastructure and automation.
Required Skills & Qualifications:

Expert-level Terraform and Terragrunt, including reusable module authoring and large-scale infrastructure management.
Hands-on TFLint and IaC quality tooling experience, including linting, validation, automated testing, and standards enforcement.
Deep Azure expertise across IaaS and PaaS services with strong ecosystem knowledge.
Proven design of standardized, reusable module libraries and opinionated IaC patterns.
Scripting and automation proficiency in PowerShell, Python, and Bash.
Experience with CI/CD and GitOps workflows for infrastructure delivery.
Working knowledge of Microsoft Entra ID (Azure AD) and RBAC for identity and access management.
Ability to design secure, scalable, and resilient automation solutions with a platform-engineering mindset.
Preferred Skills:

Experience building or integrating MCP servers and exposing tools and data to AI coding assistants.
Familiarity with Claude Code and/or GitHub Copilot, including agent skills, context, and guardrails configuration.
Hands-on experience with Port.io or another Internal Developer Portal such as Backstage.
Experience automating change management with ServiceNow or similar ITSM platforms.
Policy-as-code experience such as OPA/Conftest, Sentinel, or Azure Policy, and IaC security scanning such as tfsec or Trivy.
Infrastructure testing experience including Terratest or native Terraform tests.
Familiarity with Kubernetes and AKS and container orchestration practices.
Experience with configuration management and orchestration tooling such as Ansible.
Familiarity with monitoring, observability, and incident-response practices.
Strong communication and cross-team collaboration skills.
Certifications (Preferred):

HashiCorp Certified: Terraform Associate or Terraform Authoring & Operations Professional.
Microsoft Certified: Azure Solutions Architect Expert.
Microsoft Certified: DevOps Engineer Expert.
Certified Kubernetes Administrator (CKA).
Other relevant cloud, automation, or security certifications

Key Skills

Education

Bachelor's degree