Terraform & Infrastructure as Code (IaC) Engineer

emagine; Lisboa; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

emagine is seeking a Senior Terraform and IaC Engineer to design, implement, and maintain automated, version-controlled cloud infrastructure using Terraform as the primary IaC tool. The role ensures infrastructure reproducibility, security, and governance throughout its lifecycle while promoting automation practices that minimize manual effort and operational risk.

The position offers a hybrid work model with onsite days in the Lisbon area and occasional remote work, requiring strong

Qualifications

• 5+ years of cloud infrastructure engineering/operations.
• 3+ years hands-on Terraform production experience (HCL).
• Proficient with Terraform state, workspaces, and modules.
• Strong experience with AWS, Azure, or GCP.
• Knowledge of IAM, networking, and cloud security.

Responsibilities

• Design and develop reusable Terraform modules and patterns.
• Manage remote state backends and state locking strategies.
• Build and maintain CI/CD pipelines for automated provisioning.
• Define and enforce governance via Policy as Code (Sentinel/OPA/Checkov/tfsec).
• Promote best practices for git workflows, reviews, and repo structure.
• Integrate provisioning with secrets management such as Vault, KMS, and Key Vault.
• Document infrastructure architecture, modules, and operating procedures.

Skills

Terraform

IaC

CI/CD

Cloud

Git

Scripting Bash/Python

Security practices

Networking/IAM

Documentation

Team collaboration

Job description

We are looking for a Senior Terraform and Infrastructure as Code (IaC) Engineer to design, implement, and maintain automated, version-controlled cloud infrastructure using Terraform as the primary Infrastructure as Code (IaC) tool.

The role is responsible for ensuring infrastructure reproducibility, security, and governance throughout its lifecycle while promoting automation practices that minimize manual effort and operational risk.

Key Responsibilities

• Design and develop reusable, parameterized Terraform modules.
• Manage remote state backends (e.g., S3 with DynamoDB, Azure Storage, Terraform Cloud) and implement state locking strategies.
• Build and maintain CI/CD pipelines for automated infrastructure provisioning, including controlled plan and apply workflows.
• Define and enforce governance policies through Policy as Code frameworks (e.g., Sentinel, OPA/Checkov, tfsec).
• Promote best practices for version control, code reviews, and repository organization.
• Integrate infrastructure provisioning processes with secrets management solutions such as HashiCorp Vault, AWS KMS, and Azure Key Vault.
• Document infrastructure architecture, Terraform modules, and operational procedures.

Key Requirements

• Minimum 5 years of experience in cloud infrastructure engineering and operations.
• Minimum 3 years of hands-on experience with Terraform in production environments.
• Proven hands-on experience in production environments with Terraform (HCL).
• Strong experience with at least one major cloud provider: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Solid understanding of Terraform state management, workspaces, and module development.
• Proficiency with Git and modern branching strategies (e.g., GitFlow or trunk-based development).
• Experience building and maintaining CI/CD pipelines using tools such as GitLab CI, GitHub Actions, Azure DevOps, or Jenkins.
• Scripting skills using Bash and/or Python.
• Strong knowledge of networking, Identity and Access Management (IAM), and cloud security principles.

Soft Skills

• Strong autonomy and a results-oriented mindset.
• Good technical documentation and communication skills.
• Team player with the ability to collaborate effectively with development teams in a DevOps environment.

Other Details

Onsite/remote work mix:

1st week: 2 days onsite in Oeiras/Taguspark

2nd week: 2 days onsite in Oeiras/Taguspark

3rd week: Remote