> Markdown version of [/jobs/ext/1978386-staff-azure-cloud-engineer-automation](https://www.wearedevelopers.com/jobs/ext/1978386-staff-azure-cloud-engineer-automation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Azure Cloud Engineer, Automation

- **Company:** Holthouse Carlin & Van Trigt LLP
- **Location:** Phoenix, AZ, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Bash Shell, Cloud Computing, Cloud Engineering, Continuous Integration, Domain Name System (DNS), Github, Python (Programming Language), Log Analysis, Windows PowerShell, Policy as Code, Firewalls (Computer Science), Build Management, Terraform
- **Published:** August 7, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/staff-azure-cloud-engineer-automation-phoenix-az-usa-58834643

## About the Role

gating in CI/CD * Implement security and observability baseline with Defender for Cloud, Log Analytics, and Azure Policy * Coordinate Entra ID architecture and network standards with security and IT teams * Define a self-service deployment pattern to enable application teams to ship code without deep Terraform work * Set up shift-left scanning and incident prevention approaches * Guide extension of infrastructure patterns to application delivery Tasks * 6+ years in cloud infrastructure/platform engineering with production ownership * Strong hands-on experience with Azure, Terraform IaC, and networking * Deep Terraform module authorship and state management experience * Knowledge of Azure networking (hub-spoke, NSGs, Firewall, DNS) and Entra ID governance * Experience building CI/CD pipelines for IaC (GitHub Actions, Azure DevOps) * Understanding of policy-as-code (Sentinel, OPA) and IaC security scanning * Proficient scripting (PowerShell, Bash, Python) * Ability to work autonomously
as the first cloud engineer on a program * Familiarity with SOC 2 controls and compliance-driven environments * Preferred: Terraform Cloud/Enterprise, Waypoint, Azure Verified Modules, SOC 2/HIPAA exposure * Preferred: Microsoft AZ-305/AZ-400 certifications Key requirements *

## Description

Experteer Overview In this role you lead the design and build of a new Azure landing zone as part of a cloud modernization program. You will own the end-to-end Terraform and CI/CD setup, pipelines, and security/governance standards, collaborating across IT, security, and network teams. You codify cloud standards into automation and guide the path toward self-service deployment for developers. This is a hands-on, senior engineering position focused on delivering a scalable, compliant cloud foundation. You will shape the tooling and patterns that future engineers follow. Compensation / Benefits * Design and build the Azure landing zone aligned with CAF design areas and Well-Architected Framework * Own Terraform Cloud setup and state strategy * Configure hub-spoke networking, NSGs, Azure Firewall, WAF, DNS, and private endpoints * Codify cloud engineering practice: standards for modules, repos, branching, and policy-as-code * Establish guardrails for governance and automate plan/apply gating in CI/CD * Implement security and observability baseline with Defender for Cloud, Log Analytics, and Azure Policy * Coordinate Entra ID architecture and network standards with security and IT teams * Define a self-service deployment pattern to enable application teams to ship code without deep Terraform work * Set up shift-left scanning and incident prevention approaches * Guide extension of infrastructure patterns to application delivery Tasks * 6+ years in cloud infrastructure/platform engineering with production ownership * Strong hands-on experience with Azure, Terraform IaC, and networking * Deep Terraform module authorship and state management experience * Knowledge of Azure networking (hub-spoke, NSGs, Firewall, DNS) and Entra ID governance * Experience building CI/CD pipelines for IaC (GitHub Actions, Azure DevOps) * Understanding of policy-as-code (Sentinel, OPA) and IaC security scanning * Proficient scripting (PowerShell, Bash, Python) * Ability to work autonomously as the first cloud engineer on a program * Familiarity with SOC 2 controls and compliance-driven environments * Preferred: Terraform Cloud/Enterprise, Waypoint, Azure Verified Modules, SOC 2/HIPAA exposure * Preferred: Microsoft AZ-305/AZ-400 certifications Key requirements *


## Related Videos

- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)