Senior Azure Cloud Engineer - Terraform & CI/CD Lead

HCVT; Westlake Village (CA); Hybrid; USD 140,000 - 185,000; Full time

Job summary

HCVT is seeking a Staff Azure Cloud Engineer to own design and build of a new Azure landing zone for a multi‑year modernization program. You will code the pipelines, manage Terraform Cloud, and implement hub‑spoke networking with robust security controls.

You will work with IT, security, and network teams to establish standards, codify them, and guide future engineers in adopting a golden path for self‑service deployment of application code onto the landing zone.

Qualifications

• 6+ years in cloud infrastructure/platform engineering with real production ownership.
• A well‑rounded Azure Cloud generalist across Terraform/IaC, Azure networking, and firewall security.
• Deep hands‑on Terraform experience: module authorship, remote state, workspace strategy.
• Strong Azure networking and security: hub‑spoke, NSGs, Azure Firewall, private endpoints, DNS.
• Working knowledge of policy‑as‑code approaches and IaC/security scanning practices.
• Comfortable being the first cloud engineer on a program and defending decisions.

Responsibilities

• Design and build the Azure landing zone aligned to CAF design areas and Well-Architected Framework pillars.
• Own Terraform Cloud setup: workspace structure, variable sets, run triggers, and remote state.
• Hands‑on networking and firewall configuration: hub‑spoke topology, NSGs, private endpoints, DNS.
• Define cloud native engineering practices; codify standards, branching, review workflow, and policy‑as‑code.
• Establish policy‑as‑code guardrails to enforce governance on every plan.
• Build CI/CD pipelines for infrastructure changes with automated plan and gating.
• Stand up shift‑left scanning and security observability baseline with Azure tools.

Skills

Azure cloud engineering

Terraform/IaC

Azure networking

Firewall security

Scripting (PowerShell/Bash/Python)

SOC 2 awareness

CI/CD pipelines

Entra ID

Tools

Terraform Cloud/Enterprise

GitHub Actions

Azure DevOps

HashiCorp HCP Waypoint

Azure Monitor/Log Analytics

Microsoft Defender for Cloud

Entra ID

Job description

HCVT is seeking a Staff Azure Cloud Engineer to own design and build of a new Azure landing zone for a multi‑year modernization program. You will code the pipelines, manage Terraform Cloud, and implement hub‑spoke networking with robust security controls.

You will work with IT, security, and network teams to establish standards, codify them, and guide future engineers in adopting a golden path for self‑service deployment of application code onto the landing zone.