Business Azure Cloud Engineer – Infrastructure as Code

Position Summary

The 
Azure Cloud Engineer
 will design, build, and support cloud infrastructure environments in 
Microsoft Azure
, leveraging 
Infrastructure as Code (IaC)
 using 
Terraform Cloud/Enterprise
.

This role is responsible for developing reusable Terraform modules, automating deployments, implementing governance and security controls, and supporting application and data platform integrations.

The engineer will work closely with the Infrastructure, Security, Application, and Data Engineering teams to ensure Azure environments are 
secure, scalable, and compliant
, while improving operational efficiency through automation.

Responsibilities

• Design, configure, and deploy 
  Azure infrastructure
   (Compute, Network, Storage, PaaS) using 
  Terraform
  .
• Develop and maintain 
  modular Terraform code
   with state management in Terraform Cloud or Azure Storage.
• Implement 
  CI/CD pipelines
   (GitHub Actions or Azure DevOps) for infrastructure deployments using OIDC authentication.
• Build and manage Azure services including:
• Networking:
   VNets, Subnets, Firewalls, Load Balancers, Private Endpoints, VPN/ExpressRoute
• Compute:
   Virtual Machines, App Services, Function Apps, AKS
• Storage:
   Blob, File, and ADLS Gen2
• Data Platform:
   Azure Data Factory, Databricks, Synapse
• Security:
   Key Vault, Defender for Cloud, RBAC, Managed Identities
• Implement Azure governance standards including 
  naming conventions, tagging, policies, and monitoring
  .
• Manage and optimize 
  cost, performance, and availability
   across environments.
• Participate in 
  disaster recovery planning
  , including defining and validating 
  RTO/RPO
  .
• Develop and maintain infrastructure documentation, runbooks, and change records.
• Collaborate with application and data teams to support environment provisioning and deployments.
• Support patching cadence and compliance reporting using Azure Update Manager and automation.

Minimum Qualifications

• Azure Cloud Infrastructure (compute, network, storage, PaaS)
  –
  Required, 5+ years of d
  esigning and implementing Azure environments including VNets, App Services, and Storage solutions.
• Infrastructure as Code (Terraform)
  –
  Required, 4+ years of d
  eveloping Terraform modules, managing state files, and automating deployments via Terraform Cloud/Enterprise.
• Azure Networking (VNets, Firewalls, Load Balancers, Private Endpoints)
  –
  Required, 3+ years of h
  ands-on configuration and troubleshooting of Azure networking.
• Azure Data Platform (Data Factory, Databricks, Synapse)
  –
  Desired, 2+ years of d
  eploying and managing Azure data services using Terraform or manual provisioning.
• Azure Key Vault and Security Integration
  –
  Required, 3+ years of m
  anaging secrets, keys, and certificates for application and infrastructure workloads.
• CI/CD Automation (GitHub Actions or Azure DevOps)
  –
  Required, 3+ years of b
  uilding and maintaining infrastructure pipelines with OIDC authentication.
• Azure Governance and Compliance (Policy, Blueprints, RBAC)
  –
  Required, 3+ years of i
  mplementing policies, tagging, and access control for compliance and security.
• Scripting (PowerShell, Python, or Bash)
  –
  Required, 3+ years of w
  riting scripts for automation, configuration, and monitoring tasks.
• Monitoring and Logging (Azure Monitor, Log Analytics, Application Insights)
  –
  Required, 3+ years of i
  mplementing monitoring solutions for performance and availability tracking.
• Azure Cost Optimization and Management
  –
  Desired, 2+ years of e
  xperience analyzing usage patterns and implementing cost-control mechanisms.
• Disaster Recovery / Business Continuity
  –
  Desired, 2+ years of s
  etting up DR environments and defining RTO/RPO objectives.
• Linux and Windows Administration
  –
  Desired, 3+ years of m
  anaging OS-level configuration, patching, and hardening in Azure environments.
• ITIL/Service Management Process (Incident, Change, Problem)
  –
  Desired, 2+ years of w
  orking within structured change and incident management processes.
• Azure Certifications (AZ-104, AZ-305, or Terraform Associate)
  –
  Desired p
  rofessional certifications validating Azure and IaC expertise.

Preferred Qualifications

• Experience with 
  multi-subscription Azure architecture
   and landing zone design.
• Familiarity with 
  IaC testing and policy enforcement tools
   (Terratest, Checkov, Sentinel).
• Experience with 
  Azure Containers (AKS, Container Instances)
   and integrating security best practices.
• Experience collaborating in 
  Agile/Scrum
   environments.

Soft Skills

• Strong communication and documentation abilities.
• Analytical mindset with a focus on automation and reliability.
• Effective collaborator with cross-functional teams (Dev, Sec, Ops).
• Self-driven, proactive, and comfortable in dynamic project environments.

Education and Certifications

• Bachelor's degree in Computer Science, Engineering, or related field (or equivalent work experience).
• Microsoft Certified: Azure Administrator Associate (AZ-104)
   or 
  Azure Solutions Architect Expert (AZ-305)
   preferred.
• HashiCorp Certified: Terraform Associate
   strongly desired.

Assignment Overview

• Engagement Type:
   Contract (W2 or C2C through vendor)
• Duration:
   12+ months, with option to extend
• Work Schedule:
   Full-time, Monday – Friday, 8:00 AM – 4:30 PM CST
• Work Location:
   Hybrid – St. Paul, MN (onsite up to 2 days/week)