Senior Azure Infra Architect & Terraform Automation

Randstad Digital Americas; Charlotte (NC); On-site; USD 90,000 - 105,000; Full time

Job summary

Randstad Digital in Charlotte, NC is seeking a Senior Azure Infrastructure Consultant to design, automate, and operate enterprise-grade Azure infrastructure using modular Terraform within an established landing zone. You will own infrastructure delivery from identity to workload resilience.

You will collaborate with platform leads, security officers, and application teams to embed automated governance, least-privilege access, and proactive lifecycle operations for production-hardened

Qualifications

• 5+ years designing, provisioning, and operating enterprise Azure infrastructure.
• Expert-level Terraform proficiency with modular, version-controlled workflows.
• Deep Azure Networking, Security, and policy compliance experience.
• Experience with ACA, PostgreSQL Flexible Server, Cosmos DB, and private endpoints.
• Strong RBAC, Entra ID, and Workload Identity Federation knowledge.
• Excellent written and verbal communication for design docs and runbooks.

Responsibilities

• Architect, test, and maintain reusable Terraform modules with secure defaults.
• Organize remote state and manage DR scenarios without production impact.
• Review Terraform plans for replacements and dependencies before deployment.
• Design VNets, NSGs, private endpoints, and DNS integration.
• Implement JIT workflows and IAM governance with Entra PIM.
• Monitor, optimize costs, and ensure platform reliability across regions.

Skills

Azure infra design

Terraform proficiency

Communication skills

Education

Bachelor's degree

Tools

Terraform

Azure

Azure Policy

KQL

Job description

Randstad Digital in Charlotte, NC is seeking a Senior Azure Infrastructure Consultant to design, automate, and operate enterprise-grade Azure infrastructure using modular Terraform within an established landing zone. You will own infrastructure delivery from identity to workload resilience.

You will collaborate with platform leads, security officers, and application teams to embed automated governance, least-privilege access, and proactive lifecycle operations for production-hardened