Lead Azure Cloud Engineer - Terraform & Landing Zone

Holthouse Carlin & Van Trigt LLP; Irvine (CA); Hybrid; USD 140,000 - 185,000; Full time

Job summary

Holthouse Carlin & Van Trigt LLP is building a new Azure cloud platform and seeks a Lead Staff Azure Cloud Engineer to design and implement the landing zone. You will own Terraform modules, pipelines, and security controls while collaborating with IT, security, and network teams.

This hands-on role requires deep expertise in Azure networking, Terraform Cloud, and CI/CD practices to establish a scalable, self-service deployment pattern.

Qualifications

• 6+ years in cloud infrastructure/platform engineering with production ownership.
• Well-rounded Azure Cloud generalist across Terraform/IaC, Azure networking, and security.
• Deep hands-on Terraform experience: modules, remote state, environments, version pinning.
• Strong Azure networking and security: hub-spoke, NSGs, Azure Firewall, DNS, private endpoints.
• Experience building CI/CD pipelines for infrastructure changes (GitHub Actions, Azure DevOps).
• Knowledge of policy-as-code approaches (Sentinel, OPA) for guardrails.
• Scripting ability in PowerShell, Bash, or Python for automation.

Responsibilities

• Design and build the Azure landing zone per CAF and Well-Architected Framework.
• Own Terraform Cloud setup: state management, variable sets, run triggers.
• Define and implement the CI/CD pipeline for infra changes with gates.
• Configure networking, firewall rules, and security controls across Azure services.
• Codify cloud standards and governance with policy-as-code and automation.
• Collaborate with security, network, and IT teams to align on standards.

Skills

Cloud infra experience

Azure Cloud

Terraform IaC

Azure networking

CI/CD pipelines

Policy as code

Scripting (PowerShell/Bash/Python)

SOC 2 security knowledge

Tools

GitHub Actions

Terraform Cloud/Enterprise

HashiCorp Waypoint

Job description

Holthouse Carlin & Van Trigt LLP is building a new Azure cloud platform and seeks a Lead Staff Azure Cloud Engineer to design and implement the landing zone. You will own Terraform modules, pipelines, and security controls while collaborating with IT, security, and network teams.

This hands-on role requires deep expertise in Azure networking, Terraform Cloud, and CI/CD practices to establish a scalable, self-service deployment pattern.