Staff Azure Cloud Engineer, Automation

Experteer Overview In this role you will lead the design and build of a new Azure landing zone to underpin a multi-year cloud modernization program. You will own hands-on Terraform-based infrastructure, pipelines, and security guardrails, working as the senior cloud engineering voice with IT, security, and network teams. You will set standards, codify processes, and enable self-service deployment patterns for other engineers. This is a practical, impact-driven role with a strong emphasis on governance, automation, and security. Compensation / Benefits * Design and build the Azure landing zone aligned with CAF and Well-Architected Framework * Develop Terraform modules and manage Terraform Cloud workspace and state strategy * Configure networking and security (hub-spoke, NSGs, Azure Firewall, WAF, private endpoints, DNS) * Codify to-be cloud-native software engineering practices and CI/CD for infrastructure * Establish policy-as-code guardrails and shift-left tooling for IaC * Implement security and observability baseline (Defender for Cloud, Log Analytics, Azure Policy) * Coordinate Entra ID architecture with security and network teams * Define module structure, documentation, and code-review standards for future hires * Create a self-service application deployment pattern and golden path for engineers Tasks * 6+ years in cloud infrastructure/platform engineering with production ownership * Strong Azure generalist with Terraform/IaC, networking, and security expertise * Hands-on Terraform module authorship and state management * Experience with Azure networking, security, and governance (hub-spoke, NSGs, Azure Policy) * Knowledge of SOC 2 control families and designing compliant landing zones * Experience building CI/CD pipelines for infrastructure changes * Familiarity with policy-as-code approaches and IaC security scanning * Strong scripting (PowerShell, Bash, Python) for automation * Ability to work independently and influence decisions on a new program * Experience with HashiCorp HCP Waypoint or similar IDP (preferred) Key requirements *

Experteer Overview In this role you will lead the design and build of a new Azure landing zone to underpin a multi-year cloud modernization program. You will own hands-on Terraform-based infrastructure, pipelines, and security guardrails, working as the senior cloud engineering voice with IT, security, and network teams. You will set standards, codify processes, and enable self-service deployment patterns for other engineers. This is a practical, impact-driven role with a strong emphasis on governance, automation, and security. Compensation / Benefits * Design and build the Azure landing zone aligned with CAF and Well-Architected Framework * Develop Terraform modules and manage Terraform Cloud workspace and state strategy * Configure networking and security (hub-spoke, NSGs, Azure Firewall, WAF, private endpoints, DNS) * Codify to-be cloud-native software engineering practices and CI/CD for infrastructure * Establish policy-as-code guardrails and shift-left tooling for IaC * aaaaa with security and observability baseline (Defender for Cloud, Log Analytics, Azure Policy) * Coordinate Entra ID architecture with security and network teams * Define module structure, documentation, and code-review standards for future hires * Create a self-service application deployment pattern and golden path for engineers Tasks * 6+ years in cloud infrastructure/platform engineering with production ownership * Strong Azure generalist with Terraform/IaC, networking, and security expertise * Hands-on Terraform module authorship and state management * Experience with Azure networking, security, and governance (hub-spoke, NSGs, Azure Policy) * Knowledge of SOC 2 control families and designing compliant landing zones * Experience building CI/CD pipelines for infrastructure changes * Familiarity with policy-as-code approaches and IaC security scanning * Strong scripting (PowerShell, Bash, Python) for automation * Ability to work independently and influence decisions on a new program * Experience with HashiCorp HCP Waypoint or similar IDP (preferred) Key requirements *