Cloud Infra Automation Engineer

Turtle Trax S.A.; United States; À distance; USD 130 000 - 180 000; Plein temps

Résumé du poste

Turtle Trax S.A. is seeking a hands-on Senior Azure Infrastructure Automation Engineer to mature and extend our IaC framework. You will expand Terraform modules for Azure and build an AI-enabled self-service layer so developers can request compliant, production-ready infrastructure automatically.

Join a team focused on platform engineering, security, and scalable automation. You will drive CI/CD, governance, and golden paths while mentoring the platform team and delivering robust, auditable

Qualifications

• Mastery-level Terraform and Terragrunt for IaC.
• Deep Azure expertise across IaaS and PaaS.
• Proven track record designing standardized, reusable module libraries and opinionated IaC patterns.
• Strong scripting in PowerShell, Python and Bash.
• CI/CD and GitOps workflows for infrastructure delivery.
• Identity, access, and authentication using Microsoft Entra ID (Azure AD) and RBAC.
• Platform-engineering mindset focused on developer experience and self-service.

Responsabilités

• Refine, harden, and extend our IaC framework with Terraform/Terragrunt for consistency and quality.
• Expand and standardize the Terraform module library across Azure, with secure defaults and embedded guardrails.
• Enforce IaC quality via TFLint, policy-as-code, and automated tests with pre-merge checks.
• Build AI-assisted self-service: stand up MCP server and author agent skills for Claude Code or Copilot to generate compliant infra.
• Automate change management by integrating pipelines with ServiceNow and CMDB updates.
• Design self-service workflows, portals, and golden paths through Port.io and similar tooling.
• Maintain CI/CD and GitOps pipelines for infrastructure delivery.
• Develop supporting automation in PowerShell, Python, and Bash.
• Manage identity/security patterns in Microsoft Entra ID and enforce least-privilege design.
• Collaborate with dev teams to reduce provisioning bottlenecks and improve the self-service experience.

Connaissances

Terraform

Terragrunt

Azure IaaS/PaaS

PowerShell

Python

Bash

CI/CD

GitOps

RBAC/Azure AD

Platform mindset

Mentoring

Outils

Terraform Modules

TFLint

tfsec/Checkov

ServiceNow

Claude Code

GitHub Copilot

Port.io

Backstage

Kubernetes/AKS

Azure DevOps

Description du poste

Cloud Infra Automation Engineer

Senior Azure Infrastructure Automation Engineer

• Infrastructure-as-Code
• Platform Engineering
• AI-Enabled Self-Service

Overview

We are looking for a hands-on Senior Azure Infrastructure Automation Engineer to help us mature and extend how infrastructure is delivered across our organization. We already have a working Infrastructure-as-Code (IaC) framework and a meaningful library of Terraform modules in place - and this role is about taking that foundation to the next level: expanding our module coverage, refining and hardening the existing environment, and building a new AI-enabled self-service layer on top.

The central mission is to make infrastructure self-service. You will grow our standardized, opinionated Terraform module library and expose it through an AI-enabled developer experience - so that engineers can describe what they need and have compliant, production-ready infrastructure generated for them automatically, with our standards and guardrails baked in. If you are excited about Terraform at scale, platform engineering, and applying modern AI tooling to real infrastructure problems, this role is for you.

What You'll Work On

• Expanding the module library - building on our existing Terraform modules to broaden coverage across our Azure estate, standardizing patterns and ensuring security, naming, tagging, and policy guardrails are built in by default.
• Refining the existing IaC framework - hardening and improving our current Terraform and Terragrunt environment for maintainability, consistency, and quality, with stronger linting, validation, testing, and CI/CD.
• An AI-enabled self-service experience (the new build) - an IaC MCP (Model Context Protocol) server and configured agent skills so that developers using Claude Code or GitHub Copilot can interrogate our approved modules and standards, understand the "rules of the road," and automatically build the infrastructure their projects need.
• Automated governance - change-management automation integrated with ServiceNow, plus developer-facing workflows and golden paths delivered through Port.io.

Key Responsibilities

• Refine, harden, and extend our existing IaC framework using Terraform and Terragrunt, improving consistency, maintainability, and quality across environments.
• Expand and standardize our existing Terraform module library, authoring additional modules to broaden Azure coverage, with secure defaults, consistent naming/tagging, and embedded policy guardrails.
• Establish and enforce IaC quality standards using TFLint and policy-as-code, including linting, validation, automated testing, and pre-merge checks.
• Build the AI-assisted self-service platform: stand up and maintain an IaC MCP server and author the agent skills/context that encode our standards, so developers can use Claude Code or GitHub Copilot to query approved modules and generate compliant infrastructure for their projects.
• Automate change management by integrating IaC deployment pipelines with ServiceNow (change requests, approvals, CMDB updates) to keep delivery fast while staying audit-ready.
• Design and implement self-service workflows, scaffolding, and golden paths through Port.io and other developer-portal/automation tooling.
• Build and maintain CI/CD and GitOps pipelines for infrastructure delivery.
• Write and maintain supporting automation in PowerShell, Python, and Bash.
• Manage identity, access, and authentication patterns through Microsoft Entra ID (Azure AD), including RBAC and least-privilege design for the platform.
• Partner with development teams to remove provisioning bottlenecks, gather feedback on the self-service experience, and continuously improve it.
• Help grow and mentor the platform team as it scales, championing platform-engineering and self-service principles across the organization.
• Ensure infrastructure and automation are secure, reliable, and compliant with organizational policies and best practices.

Required Skills & Experience

• Mastery-level Terraform and Terragrunt for Infrastructure-as-Code, including authoring reusable modules and managing infrastructure at scale.
• Hands-on experience with TFLint and IaC quality tooling - linting, validation, automated testing, and enforcing standards across a codebase.
• Deep Azure expertise across IaaS and PaaS services and the surrounding ecosystem.
• Proven track record designing standardized, reusable module libraries and opinionated IaC patterns that other teams build on.
• Strong scripting and automation skills in PowerShell, Python, and Bash.
• Solid experience with CI/CD and GitOps workflows for infrastructure delivery.
• Working knowledge of identity, access, and authentication using Microsoft Entra ID (Azure AD) and RBAC.
• A genuine platform-engineering mindset—you care about developer experience and building safe, easy self-service for others.
• Ability to design secure, scalable, and resilient automation solutions.

Preferred Qualifications

• Experience building or integrating MCP (Model Context Protocol) servers, or otherwise exposing tools and data to AI coding assistants.
• Familiarity with Claude Code and/or GitHub Copilot and AI-assisted development workflows, including configuring agent skills, context, or guardrails.
• Hands-on experience with Port.io or another Internal Developer Portal (e.g., Backstage).
• Experience automating change management with ServiceNow or similar ITSM platforms.
• Policy-as-code experience (e.g., OPA/Conftest, Sentinel, Azure Policy) and IaC security scanning (Checkov, tfsec/Trivy).
• Infrastructure testing experience (e.g., Terratest, native Terraform tests).
• Familiarity with Kubernetes / AKS and container orchestration.
• Experience with configuration management and orchestration tooling (e.g., Ansible).
• Familiarity with monitoring, observability, and incident-response practices.
• Excellent communication skills and the ability to collaborate across multiple teams.

Certifications (Preferred)

• HashiCorp Certified: Terraform Associate (or Terraform Authoring & Operations Professional)
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: DevOps Engineer Expert
• Certified Kubernetes Administrator (CKA)
• Other relevant cloud, automation, or security certifications are a plus.

Why Join Us

• A high-ownership role: you'll help take an established IaC platform to the next level and lead the build-out of our AI-enabled self-service layer.
• Work at the intersection of cloud infrastructure, platform engineering, and cutting-edge AI tooling - building something genuinely new.
• Real impact: your work directly shapes how every engineering team ships infrastructure.
• A forward-thinking engineering culture focused on automation, innovation, and continuous improvement.

ADVANCED ENGLISH

REMOTE