> Markdown version of [/jobs/ext/1971249-staff-azure-cloud-engineer-automation](https://www.wearedevelopers.com/jobs/ext/1971249-staff-azure-cloud-engineer-automation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Azure Cloud Engineer, Automation

- **Company:** Holthouse Carlin & Van Trigt LLP
- **Location:** Westlake Village, CA, United States
- **Contract:** Permanent contract
- **Skills:** Adobe InDesign, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Engineering, Code Review, Continuous Integration, Domain Name System (DNS), Github, Python (Programming Language), Log Analysis, Windows PowerShell, Policy as Code, Scripting, Cloud Platform System, Firewalls (Computer Science), Build Management, Hashicorp, Firewall Services Module, Terraform
- **Published:** August 7, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/staff-azure-cloud-engineer-automation-westlake-village-ca-usa-58834634

## About the Role

aav_ and maintain CI/CD pipelines for infrastructure changes with gating and approvals * Set up security and observability baselines (Defender for Cloud, Log Analytics, Azure Policy) * Coordinate Entra ID architecture with identity/security and network teams * Create a self-service deployment pattern ("golden path") for application delivery * Set the standard for module structure, documentation, and code review for future hires Tasks * 6+ years in cloud infrastructure/platform engineering with production ownership * Strong Terraform/IaC experience including module authorship and state management * Deep Azure networking and security expertise (hub-spoke, NSGs, Azure Firewall, DNS, private endpoints) * Experience building CI/CD for infrastructure changes (GitHub Actions, Azure DevOps) * Knowledge of policy-as-code approaches (Sentinel, OPA) and IaC security scanning * Scripting skills (PowerShell, Bash, Python) for tooling and automation * Ability to make and defend decisions as the first
cloud engineer on the program * Preferred:Terraform Cloud/Enterprise, Azure Verified Modules, experience in compliance-driven environments * Preferred: HashiCorp HCP Waypoint or internal developer platform * Preferred: SOC 2/HIPAA awareness in design * Certifications: Azure-related (AZ-305, AZ-400) and Terraform Associate/Professional Key requirements *

## Description

Experteer Overview In this role you lead the Azure cloud modernization initiative, owning design, automation, and deployment for a new Azure landing zone. You translate security, networking, and governance requirements into scalable IaC pipelines and self-service patterns. You work closely with security and IT teams to codify standards and drive the cloud program forward. This position offers hands-on ownership, fast impact, and a path to shaping the firm's cloud platform and development practices. Compensation / Benefits * Design and build the Azure landing zone aligned with CAF and Well-Architected Framework * Own Terraform Cloud setup, including workspace structure and state strategy * Hands-on networking and firewall configuration (hub-spoke, NSGs, Azure Firewall, WAF, private endpoints, DNS) * Define and codify cloud-native engineering practices; establish standards for modules, repos, and reviews * Implement policy-as-code guardrails and shift-left security/testing tooling * Build and maintain CI/CD pipelines for infrastructure changes with gating and approvals * Set up security and observability baselines (Defender for Cloud, Log Analytics, Azure Policy) * Coordinate Entra ID architecture with identity/security and network teams * Create a self-service deployment pattern ("golden path") for application delivery * Set the standard for module structure, documentation, and code review for future hires Tasks * 6+ years in cloud infrastructure/platform engineering with production ownership * Strong Terraform/IaC experience including module authorship and state management * Deep Azure networking and security expertise (hub-spoke, NSGs, Azure Firewall, DNS, private endpoints) * Experience building CI/CD for infrastructure changes (GitHub Actions, Azure DevOps) * Knowledge of policy-as-code approaches (Sentinel, OPA) and IaC security scanning * Scripting skills (PowerShell, Bash, Python) for tooling and automation * Ability to make and defend decisions as the first cloud engineer on the program * Preferred:Terraform Cloud/Enterprise, Azure Verified Modules, experience in compliance-driven environments * Preferred: HashiCorp HCP Waypoint or internal developer platform * Preferred: SOC 2/HIPAA awareness in design * Certifications: Azure-related (AZ-305, AZ-400) and Terraform Associate/Professional Key requirements *


## Related Videos

- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control)
- [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix)
- [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)