Senior Azure Cloud Engineer: Landing Zone & CI/CD

Socket.dev; Denver (CO); Hybrid; USD 140,000 - 185,000; Full time

Benefits offered by this job

Benefits

Job summary

HCVT is building a new Azure cloud platform to support a multi‑year modernization program. We seek a Lead Azure Cloud Engineer who will own design and implementation from week one, writing code, standing up pipelines, and codifying standards across IT, security, and networking.

This is a hands‑on, individual‑contributor role. You will work across Terraform modules, AVM bases, and gate‑driven CI/CD while collaborating with security and network teams to land shared standards and scalable tooling.

Qualifications

• 6+ years in cloud infrastructure/platform engineering with real production ownership.
• Well‑rounded Azure Cloud generalist across Terraform/IaC, Azure networking, and security.
• Deep hands‑on Terraform experience: module authorship, remote state, workspace strategy.
• Strong Azure networking and security skills: hub-spoke, NSGs, Azure Firewall, DNS.
• Experience building CI/CD pipelines for infrastructure changes.
• Knowledge of policy‑as‑code (Sentinel/OPA) and IaC scanning practices.

Responsibilities

• Design and build the Azure landing zone aligned with CAF and Well‑Architected Framework.
• Own Terraform Cloud setup end‑to‑end: workspaces, state, variables, and triggers.
• Own hands‑on networking and firewall configurations and troubleshooting.
• Define and codify cloud native software engineering practices with governance and reviews.
• Establish policy‑as‑code guardrails to enforce governance on every plan.
• Build the CI/CD pipeline for infrastructure changes with gating and approvals.
• Set up security/observability baseline (Defender for Cloud, Log Analytics, Azure Policy).
• Coordinate Entra ID architecture with identity/security teams.
• Set standards for module structure, versioning, and code reviews for future hires.
• Define a self‑service deployment pattern so Backend/Frontend can ship app code quickly.

Skills

Azure Cloud Generalist

Terraform/IaC

Azure Networking

SOC 2 controls

CI/CD pipelines

Policy-as-code

Scripting (PowerShell/Bash/Python)

Golden path / self-service deployment

Cloud security

Tools

Terraform Cloud/Enterprise

GitHub Actions

Azure DevOps

HashiCorp HCP Waypoint

Job description

HCVT is building a new Azure cloud platform to support a multi‑year modernization program. We seek a Lead Azure Cloud Engineer who will own design and implementation from week one, writing code, standing up pipelines, and codifying standards across IT, security, and networking.

This is a hands‑on, individual‑contributor role. You will work across Terraform modules, AVM bases, and gate‑driven CI/CD while collaborating with security and network teams to land shared standards and scalable tooling.