Senior Azure Infrastructure Automation Engineer

Ampcus Inc; New Jersey; On-site; USD 150,000 - 190,000; Full time

Job summary

Ampcus Inc. is seeking a hands-on Senior Azure Infrastructure Automation Engineer to mature and expand our enterprise infrastructure delivery capabilities in Warren, NJ.

You will extend Terraform modules, embed guardrails, and build an AI-enabled self-service platform for infrastructure provisioning, enabling secure, standardized self-service. The role emphasizes Terraform, Azure, IaC, and developer experience, with mentoring opportunities.

Qualifications

• Mastery-level Terraform and Terragrunt expertise.
• Experience with TFLint and IaC quality tooling.
• Deep hands-on Azure experience across IaaS and PaaS.
• Proficient in PowerShell, Python, and Bash scripting.
• Extensive CI/CD pipelines and GitOps experience.
• Experience with Microsoft Entra ID (Azure AD) and RBAC.
• Understanding of platform engineering and developer experience.
• Ability to design secure, scalable, automated infrastructure solutions.
• Strong troubleshooting and collaboration across teams.

Responsibilities

• Refine and extend the Terraform/Terragrunt IaC framework across environments.
• Expand and standardize Terraform modules for Azure ecosystem.
• Embed security defaults, tagging, RBAC, and guardrails in modules.
• Enforce IaC quality with TFLint, testing, and pre-merge gates.
• Design AI-assisted self-service infra platform via an IaC MCP server.
• Develop agent skills for AI code assistants to reuse modules.
• Automate change management with ServiceNow integrations.
• Build developer self-service workflows and platform portals.
• Maintain CI/CD and GitOps for automated delivery.
• Create automation with PowerShell, Python, and Bash.
• Implement Entra ID/RBAC and least-privilege access patterns.
• Collaborate with apps teams to optimize provisioning flows.
• Promote platform engineering, automation, and self-service.
• Mentor engineers and grow the platform team.
• Ensure security, reliability, and compliance of automation.

Skills

Terraform & Terragrunt

IaC quality tooling

Azure experience

Scripting: PowerShell/Python/Bash

CI/CD & GitOps

Azure AD RBAC

Platform engineering

Security & compliance basics

Cross-functional collaboration

Tools

Terraform

Terragrunt

TFLint

GitHub Copilot

Claude Code

Port.io

ServiceNow

Backstage

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Senior Azure Infrastructure Automation Engineer

Location(s): Warren, NJ

Job Overview

We are seeking a hands-on Senior Azure Infrastructure Automation Engineer to help mature and expand our enterprise infrastructure delivery capabilities. The organization has an established Infrastructure-as-Code (IaC) framework and a strong foundation of Terraform modules. This role will build upon that foundation by expanding module coverage, strengthening the existing IaC ecosystem, and developing an AI-enabled self-service platform for infrastructure provisioning. The primary mission is to enable secure, standardized infrastructure self-service. You will expand an opinionated Terraform module library and expose approved infrastructure patterns through an AI-enabled developer experience, allowing engineers to describe their infrastructure requirements and automatically generate compliant, production-ready configurations with organizational standards and guardrails built in. This is an excellent opportunity for an engineer passionate about Terraform at scale, Azure platform engineering, developer experience, automation, and applying AI technologies to solve real-world infrastructure challenges.

Key Responsibilities

• Refine, harden, and extend the existing Terraform and Terragrunt IaC framework to improve consistency, maintainability, reliability, and quality across environments.
• Expand and standardize the Terraform module library by developing reusable modules across the Azure ecosystem.
• Embed secure defaults, standardized naming and tagging conventions, RBAC requirements, and policy guardrails into Terraform modules.
• Establish and enforce IaC quality standards using TFLint and related tooling, including linting, validation, automated testing, and pre-merge quality gates.
• Design and implement an AI-assisted infrastructure self-service platform using an IaC MCP (Model Context Protocol) server.
• Develop agent skills, context, instructions, and guardrails that enable developers using Claude Code or GitHub Copilot to discover approved Terraform modules and generate compliant infrastructure.
• Automate infrastructure change management through ServiceNow integrations, including change requests, approval workflows, and CMDB updates.
• Design and implement developer self-service workflows, scaffolding, golden paths, and automation through Port.io or similar developer-portal platforms.
• Build and maintain CI/CD and GitOps pipelines supporting automated infrastructure delivery.
• Develop supporting automation and tooling using PowerShell, Python, and Bash.
• Implement Microsoft Entra ID (Azure AD) identity and access patterns, including RBAC and least-privilege access.
• Collaborate closely with application and development teams to identify provisioning bottlenecks and continuously improve the infrastructure self-service experience.
• Promote platform-engineering principles, automation, standardization, and developer self-service across the organization.
• Mentor engineers and contribute to the growth and maturity of the platform engineering team.
• Ensure infrastructure automation meets security, reliability, compliance, and operational standards.

Required Skills & Experience

• Mastery-level expertise with Terraform and Terragrunt, including development of reusable modules and management of infrastructure at enterprise scale.
• Strong hands-on experience with TFLint and IaC quality tooling, including linting, validation, automated testing, and enforcement of coding standards.
• Deep hands-on Azure experience across both IaaS and PaaS services.
• Proven experience designing and maintaining standardized, reusable Terraform module libraries and opinionated IaC patterns.
• Strong scripting and automation skills using PowerShell, Python, and Bash.
• Extensive experience with CI/CD pipelines and GitOps-based infrastructure delivery.
• Experience with Microsoft Entra ID (Azure AD), RBAC, identity management, authentication, and least-privilege security models.
• Strong understanding of platform engineering and developer experience principles.
• Demonstrated ability to design secure, scalable, resilient, and highly automated infrastructure solutions.
• Strong troubleshooting, problem-solving, and systems-thinking capabilities.
• Excellent communication and collaboration skills with the ability to work effectively across engineering and development teams.

Preferred Qualifications

• Experience building, deploying, or integrating MCP (Model Context Protocol) servers.
• Experience exposing infrastructure tools, data, and workflows to AI coding assistants.
• Hands-on experience with Claude Code, GitHub Copilot, or similar AI-assisted development platforms.
• Experience configuring AI agent skills, context, instructions, and infrastructure guardrails.
• Experience with Port.io or other Internal Developer Portals such as Backstage.
• Experience integrating infrastructure deployment and change-management processes with ServiceNow or similar ITSM platforms.
• Experience with policy-as-code frameworks such as OPA/Conftest, Sentinel, or Azure Policy.
• Experience with IaC security scanning tools such as Checkov, tfsec, or Trivy.
• Experience with infrastructure testing frameworks such as Terratest or native Terraform testing.
• Familiarity with Kubernetes and Azure Kubernetes Service (AKS).
• Experience with configuration management and orchestration tools such as Ansible.
• Knowledge of monitoring, observability, incident response, and production operations.
• Experience working in enterprise platform engineering or cloud enablement environments.

Preferred Certifications

• HashiCorp Certified: Terraform Associate or Terraform Authoring & Operations Professional
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: DevOps Engineer Expert
• Certified Kubernetes Administrator (CKA)
• Other relevant cloud, DevOps, automation, security, or infrastructure certifications are a plus.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.