Senior IaC Architect - Cloud Native Infrastructure Automation

Job Description:

We are seeking an experienced IaC Architect with strong proficiency in automation and cloud-native practices. The ideal candidate will design, implement, and maintain infrastructure using declarative IaC tools, ensuring scalability, security, and compliance across multi-cloud environments.

Key Responsibilities

Infrastructure Automation

• Develop and maintain IaC scripts using Terraform, Bicep, PowerShell script, and Ansible for provisioning and configuration of cloud resources.
• Implement Azure Resource Manager (ARM) templates and Bicep for Azure-native deployments.

CI/CD Integration

• Build and optimize pipelines in Azure DevOps and GitLab for automated deployments.
• Integrate IaC workflows with GitOps principles and version control systems.

Cloud Platform Management

• Design and deploy infrastructure on Azure, ensuring adherence to the Well-Architected Framework.
• Manage configuration drift detection and remediation using scheduled workflows.

Migration & Modernization

• Lead Azure Migrate projects and Azure Landing Zone designs for on-premises to Azure migrations (VMs, databases, applications).
• Modernize workloads by containerizing Java/.NET applications and deploying to AKS.
• Optimize legacy systems for cloud-native architectures using Cloud Adoption Framework (CAF) best practices.

Security & Compliance

• Embed security checks in IaC pipelines using tools like Checkov or GitHub Advanced Security.
• Implement Identity and Access Management (AAD, Managed Identities) and secure secrets via Azure Key Vault.

Monitoring & Optimization

• Configure monitoring solutions (Azure Monitor, Log Analytics) for deployed resources.
• Perform cost optimization and resource utilization analysis.

Required Skills

• IaC Tools: Terraform (multi-cloud), Bicep (Azure), Ansible (configuration management)
• DevOps Platforms: Azure DevOps, GitLab (CI/CD)
• Scripting & Automation: PowerShell, Bash, YAML
• Migration Tools: Azure Migrate, Azure Site Recovery
• Cloud Expertise (Microsoft Azure): ARM, AKS, ACA, App Services
• Version Control: Git, GitHub/GitLab workflows
• AI Tools: GitHub Copilot for automation and code generation
• Security Practices: Policy enforcement, compliance scanning, secrets management

Preferred Qualifications

• Experience with Azure Verified Modules (AVM) for Terraform/Bicep.
• Familiarity with container orchestration (AKS) and GitOps workflows.
• Knowledge of multi-cloud strategies and hybrid deployments.
• Certifications: Microsoft Certified DevOps Engineer Expert, Terraform Associate, SC-401 Security.

Soft Skills

• Strong problem-solving and analytical skills.
• Ability to collaborate across distributed teams.
• Excellent documentation and communication skills.