Senior Cloud Infrastructure Engineer (Terraform)

NewVision Software; Pune District; Hybrid; INR 2,400,000 - 4,000,000; Full time

Job summary

New Vision Softcom & Consultancy Pvt. Ltd is seeking a Senior Cloud Infrastructure Engineer in Pune to design, build, and automate secure Azure infrastructure with a Terraform‑driven approach.

The role emphasizes hands‑on expertise, scalable modules, and CI/CD integration across environments. You will collaborate with security and platform teams to implement robust networking, IAM, and monitoring, while maintaining CIS‑aligned security baselines and agile delivery practices.

Qualifications

• 7–9+ years in Cloud/DevOps roles.
• Strong hands-on Azure and Terraform expertise.
• Experience building CI/CD pipelines with Azure DevOps or GitLab.

Responsibilities

• Design, build, and maintain Infrastructure as Code across Azure environments.
• Develop reusable Terraform modules and automation frameworks.
• Automate provisioning, deployment, and configuration workflows.
• Manage and support Azure networking, identity, security, and subscriptions.
• Build and automate CI/CD pipelines for infrastructure deployment.
• Enforce secure-by-default patterns and CIS-aligned baselines.
• Troubleshoot complex Azure/Terraform issues in multi-environment setups.
• Collaborate with security, platform, and application teams on automated solutions.
• Participate in Agile delivery and production readiness activities.

Skills

Azure

Terraform

CI/CD

Python

Networking

Security

RBAC

Automation

Tools

Azure DevOps

GitLab

AKS

Python scripting

Job description

Senior Cloud Infrastructure Engineer (Te...

NVS/SCIE/1869231

• Product Engineering
• Pune

Posted On 29 Sep 2026

End Date 29 Sep 2027

Required Experience 7 - 10 years

Basic Section

Grade --

Employment Type Full Time

Employee Category --

Organisational

Group Company NewVison

Company Name New Vision Softcom & Consultancy Pvt. Ltd

Function Business Units (BU)

Organization Unit DevOps

Region APAC

Country India

Base office location Pune

Working model Hybrid

Weekly Off Pune office Standard

State Maharashtra

Skills

Skill

CERTIFICATION

Working Language

Job Description

Role Overview

We are looking for a Senior Cloud Infrastructure Engineer to design, build, automate, and maintain secure and reliable cloud infrastructure on Microsoft Azure. The role has a strong focus on Infrastructure as Code and Terraform-driven automation across multiple environments.

The engineer will act as a hands‑on Terraform subject matter expert, translating infrastructure requirements into reusable, scalable, and supportable automation. This is an individual contributor role for a strong cloud and automation practitioner who is comfortable executing complex infrastructure changes, improving engineering standards, and reducing manual operational effort.

Key Responsibilities

• Design, build, and maintain Infrastructure as Code using Terraform across multiple Azure environments.
• Serve as a Terraform subject matter expert for module design, code quality, reusable patterns, state management, and infrastructure automation practices.
• Develop and enhance reusable Terraform modules, templates, and automation frameworks to standardize cloud provisioning.
• Automate provisioning, deployment, configuration, and operational workflows to reduce manual effort and improve consistency.
• Manage and support Azure cloud infrastructure, including networking, identity, security, subscriptions, and shared platform services.
• Build and automate CI/CD pipelines using Azure DevOps and/or GitLab for infrastructure deployment and validation.
• Implement secure-by-default infrastructure patterns and embed validation, policy, and quality checks into automation workflows.
• Troubleshoot complex Azure and Terraform issues across development, pre‑production, and production environments.
• Implement monitoring, alerting, and operational controls to support reliable cloud services.
• Partner with cloud, security, platform, and application teams to translate technical requirements into automated infrastructure solutions.
• Contribute to continuous improvement of cloud engineering standards, documentation, and operational processes.
• Participate in Agile delivery and support production readiness, change implementation, and operational support activities.
• Design Azure network topology using a hub‑and‑spoke model, with shared platform services centralized in the hub, workload‑specific spokes, and swimlane‑based environment segregation.
• Define and enforce CIS benchmark-aligned security baselines and policies for Azure infrastructure hardening and compliance.
• Configure and manage VPN Gateway connectivity (Point‑to‑Site, Site‑to‑Site, and VNet‑to‑VNet), including subnet sizing and IP address range planning for hybrid network architectures.
• Configure Azure Bastion and other secure remote access mechanisms for infrastructure administration, and define VM‑level and resource‑level IAM/RBAC role assignments.
• Configure and manage service connections and managed identities (system‑assigned and user‑assigned) for secure authentication between CI/CD pipelines and Azure resources.
• Apply Terraform security best practices, including secure handling of sensitive variables, outputs, and state files, and remediate infrastructure vulnerabilities identified during provisioning.
• Configure and support networking for containerized workloads on Azure Kubernetes Service (AKS), integrated with the broader Azure network topology.

Technical Focus

• Microsoft Azure cloud infrastructure and platform services
• Terraform and Infrastructure as Code (IaC)
• Terraform modules, reusable patterns, remote state, workspaces, and lifecycle management
• Azure DevOps and GitLab CI/CD pipelines
• Infrastructure provisioning and operational automation
• Azure networking, identity, security, and subscription management
• Scripting and automation using Python, Bash, and PowerShell
• Monitoring, alerting, and reliability practices
• Version control and collaborative engineering workflows
• Hub-and-spoke network architecture and swimlane-based environment design
• CIS benchmark alignment and security policy definition for infrastructure hardening
• VPN Gateway connectivity (P2S, S2S, VNet-to-VNet) and subnet/IP address planning
• Managed identities (system-assigned and user-assigned), service connections, and VM/resource-specific IAM roles
• Azure Bastion and secure administrative access
• Terraform security practices, including sensitive data handling and state file protection

Experience & Required Qualifications

• 7–9+ years of overall experience in Cloud Engineering, DevOps, Infrastructure Engineering, Platform Engineering, or related technical roles.
• Strong hands‑on Microsoft Azure experience in enterprise environments.
• Deep practical expertise with Terraform, including design and implementation of reusable modules and automation patterns.
• Proven track record of automating cloud infrastructure provisioning and operational processes.
• Hands‑on experience building and maintaining CI/CD pipelines using Azure DevOps and/or GitLab.
• Strong scripting proficiency in Python, Bash, and/or PowerShell.
• Solid understanding of cloud networking, identity, security, and operational reliability.
• Experience troubleshooting infrastructure and automation issues in large‑scale environments.
• Ability to work as a senior individual contributor with strong ownership and hands‑on execution.
• Practical experience designing hub‑and‑spoke Azure network architectures, including shared services in the hub, workload isolation across spokes, and swimlane‑based environment segregation.
• Working knowledge of CIS benchmarks and experience defining security policies for cloud infrastructure hardening and compliance.
• Hands‑on experience configuring VPN Gateway connectivity (Point‑to‑Site, Site‑to‑Site, and VNet‑to‑VNet) and subnet/IP address planning for hybrid network architectures.
• Strong understanding of Azure IAM, including RBAC, system‑assigned and user‑assigned managed identities, service connections, and VM/resource‑specific role assignments.
• Experience with Azure Bastion and other secure administrative access patterns.
• Understanding of Terraform security considerations, including sensitive variable and state file handling, and experience identifying and remediating common cloud infrastructure vulnerabilities.
• Familiarity with container orchestration platforms (e.g., AKS) and associated networking configuration.

Preferred Qualifications

• Microsoft Azure certifications such as Azure Administrator, Azure Solutions Architect, or AZ‑400.
• Experience creating and governing enterprise Terraform standards and reusable module libraries.
• Experience with policy-as-code, automated validation, or secure cloud provisioning practices.
• Experience working in large enterprise or regulated environments.
• Strong hands‑on engineering and automation mindset
• Deep problem‑solving and troubleshooting capability
• Ownership‑driven approach with attention to quality and reliability
• Ability to convert infrastructure requirements into scalable automation
• Clear communication and effective cross‑team collaboration
• Self‑starter with a continuous improvement mindset