Lead Azure Cloud Engineer — Hybrid, Terraform & Landing Zone

Holthouse Carlin & Van Trigt LLP; Denver (CO); Hybrid; USD 140,000 - 185,000; Full time

Benefits offered by this job

Benefits section link

Job summary

Holthouse Carlin & Van Trigt LLP seeks a Lead Azure Cloud Engineer to build and own our Azure landing zone. This hands-on role demands design ownership, Terraform module work, and end-to-end Terraform Cloud management.

You will work with IT, security, and network teams to establish standards and automation. The ideal candidate has 6+ years of cloud infrastructure experience, strong Azure networking and security skills, and a track record of delivering CI/CD pipelines for infrastructure.

Qualifications

• 6+ years in cloud infrastructure with production ownership.
• Well-rounded Azure generalist across Terraform, networking, and security.
• Hands-on Terraform module authorship and remote state management.
• Strong networking and security skills: hub-spoke, NSGs, Firewalls, DNS.
• Experience building CI/CD pipelines for infrastructure changes.
• Familiarity with policy-as-code approaches and IaC security scanning.
• Ability to work with security, network, and IT teams to land standards.
• Strong scripting ability in PowerShell, Bash, or Python.

Responsibilities

• Design and build the Azure landing zone aligned to CAF and Well-Architected pillars.
• Own Terraform Cloud setup including state, workspaces, and variables.
• Manage networking: hub-spoke topology, NSGs, Azure Firewall, WAF rules, private endpoints.
• Define and codify to-be cloud-native software engineering practices.
• Establish policy-as-code guardrails and shift-left tooling.
• Build CI/CD pipelines for infrastructure changes with gating.
• Set up security and observability baselines (Defender for Cloud, Log Analytics).
• Coordinate Entra ID architecture with security and network teams.
• Create a golden self-service deployment pattern for apps.

Skills

Azure Cloud

Terraform/IaC

Networking & Security

Scripting (PowerShell/Bash/Python)

CI/CD pipelines

Governance & Compliance

Education

HashiCorp Terraform Associate

Microsoft AZ-305

AZ-400 DevOps Engineer

Tools

Terraform Cloud/Enterprise

Azure Verified Modules

GitHub Actions

HashiCorp HCP Waypoint

Azure Policy

Microsoft Defender for Cloud

Job description

Holthouse Carlin & Van Trigt LLP seeks a Lead Azure Cloud Engineer to build and own our Azure landing zone. This hands-on role demands design ownership, Terraform module work, and end-to-end Terraform Cloud management.

You will work with IT, security, and network teams to establish standards and automation. The ideal candidate has 6+ years of cloud infrastructure experience, strong Azure networking and security skills, and a track record of delivering CI/CD pipelines for infrastructure.