Terraform & Infrastructure as Code (IaC) Engineer

LUZA Group; Oeiras; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Remote work whenever possible

Equipment provided

Benefits plan

And others

Job summary

Luza Group is seeking a senior cloud infrastructure engineer to design and implement Terraform modules, manage remote backends, and build CI/CD pipelines. You will promote best practices and integrate secrets management.

The role offers a flexible hybrid work model, remote when possible, and a benefits plan. You will collaborate with our expert teams on large-scale projects and help ensure secure, scalable cloud architectures.

Qualifications

• Minimum 5 years of experience in cloud infrastructure engineering and operations.
• Minimum 3 years of hands-on Terraform experience in production environments.
• Strong knowledge of at least one major cloud platform (AWS, Azure, or GCP).
• Solid understanding of Terraform state management, workspaces and modules.
• Proficiency with Git and modern branching strategies (GitFlow or trunk-based).
• Experience building CI/CD pipelines with GitLab CI, GitHub Actions, Azure DevOps or Jenkins.
• Scripting skills in Bash and/or Python; networking and cloud security knowledge.
• Fluent Portuguese with technical English proficiency in reading/writing docs.

Responsibilities

• Design and develop reusable Terraform modules and secure state management.
• Manage remote state backends (S3, DynamoDB, Azure Storage, Terraform Cloud) and locking strategies.
• Build and maintain CI/CD pipelines for automated infrastructure provisioning.
• Define and enforce governance policies via Policy as Code (e.g., Sentinel, tfsec).
• Promote best practices for version control, code reviews, and repository organization.
• Integrate infrastructure provisioning with secrets management (HashiCorp Vault, AWS KMS, Azure Key Vault).
• Document infrastructure architecture, Terraform modules and operational procedures.
• Collaborate in a flexible hybrid work model.

Skills

Terraform (HCL)

Cloud infrastructure

CI/CD pipelines

Git

Bash / Python scripting

Networking & IAM security

Portuguese (fluent)

Technical English

Tools

Terraform

GitLab CI

GitHub Actions

Azure DevOps

Jenkins

Job description

Luza is an all-inclusive consulting company focused on talent, tech and innovation. We exist to elevate companies and humans all around the world, making change, from the inside to the outside.

We believe that technology + human kindness positively impacts every community around the world. Our approach is simple, we see a world without borders, and believe in equal opportunities. We are guided by our core principles of spreading positivity, good energy and promote equality and care for others.

Our hiring process is unique! People are selected by their value, education, talent and personality. We dont present ethnicity, religion, national origin, age, gender, sexual orientation or identity.

Its time to burst the bubble, and we will do it together!

What You'll do:

• Design and develop reusable, parameterized Terraform modules.
• Manage remote state backends (e.g., S3 with DynamoDB, Azure Storage, Terraform Cloud) and implement state locking strategies.
• Build and maintain CI/CD pipelines for automated infrastructure provisioning, including controlled plan and apply workflows.
• Define and enforce governance policies through Policy as Code frameworks (e.g., Sentinel, OPA/Checkov, tfsec).
• Promote best practices for version control, code reviews, and repository organization.
• Integrate infrastructure provisioning processes with secrets management solutions such as HashiCorp Vault, AWS KMS, and Azure Key Vault.
• Document infrastructure architecture, Terraform modules, and operational procedures.
• Flexible hybrid work model;

Who You Are:

• Minimum 5 years of experience in cloud infrastructure engineering and operations.
• Minimum 3 years of hands-on experience with Terraform in production environments.
• Terraform (HCL) - Proven hands-on experience in production environments.
• Cloud Platform Expertise - Strong experience with at least one major cloud provider: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Solid understanding of Terraform state management, workspaces, and module development.
• Proficiency with Git and modern branching strategies (e.g., GitFlow or trunk-based development).
• Experience building and maintaining CI/CD pipelines using tools such as GitLab CI, GitHub Actions, Azure DevOps, or Jenkins.
• Scripting skills using Bash and/or Python.
• Strong knowledge of networking, Identity and Access Management (IAM), and cloud security principles.
• Fluent in portuguese withTechnical English proficiency (reading and writing documentation).

Nice to have:

• - HashiCorp Certified: Terraform Associate certification.
• - Experience with infrastructure automation and configuration management tools such as Terragrunt, Packer, and Ansible.
• - Knowledge of Kubernetes, Helm, and cluster provisioning on Amazon EKS, Azure AKS, and Google GKE.
• - Experience with Policy as Code frameworks and security/compliance tools, including Sentinel, OPA (Open Policy Agent), Checkov, and tfsec.
• - Familiarity with observability and monitoring platforms such as Prometheus, Grafana, and Amazon CloudWatch.
• - Understanding FinOps principles and cloud cost optimization strategies.

What you'll get:

• Wage according to candidate's professional experience;
• Remote Work whenever possible;
• Delivery of work equipment adjusted to the performance of functions;
• Benefits plan;
• And others.

Work together with expert teams on projects of large magnitude and intensity, long term together with our clients, all leaders in their industries.

Are you ready to step into a diverse and inclusive world with us?

Together we will promote uniquess!