Senior Azure Infrastructure Automation Engineer

Ampcus, Inc; Warren Township (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Ampcus Inc. is seeking a hands-on Senior Azure Infrastructure Automation Engineer to mature and expand our IaC capabilities.

You will enhance an existing Terraform/Terragrunt framework, expand the module library across Azure, and implement an AI-enabled self-service platform for secure, compliant infrastructure provisioning. You will drive automation with CI/CD and GitOps, embed guardrails, RBAC, and security best practices, and collaborate with engineering to optimize provisioning bottlenecks

Qualifications

• Mastery of Terraform and Terragrunt at enterprise scale.
• Experience with TFLint and IaC quality tooling (linting, testing, policy enforcement).
• Deep Azure experience across IaaS and PaaS.
• Designing reusable Terraform modules and opinionated IaC patterns.
• Scripting and automation with PowerShell, Python, Bash.

Responsibilities

• Refine and extend Terraform/Terragrunt IaC framework for consistency and reliability.
• Expand and standardize Terraform modules across Azure.
• Embed secure defaults, naming conventions, RBAC, and guardrails in modules.
• Enforce IaC quality standards with linting, testing, and pre-merge gates.
• Design AI-assisted self-service platform for infrastructure provisioning.
• Develop agent skills and guardrails for AI coding assistants.
• Automate infrastructure change management via ServiceNow integrations.
• Create self-service workflows and developer portals for automation.
• Build CI/CD and GitOps pipelines for automated delivery.

Skills

Terraform

Terragrunt

TFLint

Azure

CI/CD

GitOps

PowerShell

Python

Bash

Azure AD / RBAC

AI-assisted development

Security best practices

Tools

Terraform Modules

Terragrunt

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Senior Azure Infrastructure Automation Engineer

Location(s): Warren, NJ

Job Overview

We are seeking a hands-on Senior Azure Infrastructure Automation Engineer to help mature and expand our enterprise infrastructure delivery capabilities. The organization has an established Infrastructure-as-Code (IaC) framework and a strong foundation of Terraform modules. This role will build upon that foundation by expanding module coverage, strengthening the existing IaC ecosystem, and developing an AI-enabled self-service platform for infrastructure provisioning.

The primary mission is to enable secure, standardized infrastructure self-service. You will expand an opinionated Terraform module library and expose approved infrastructure patterns through an AI-enabled developer experience, allowing engineers to describe their infrastructure requirements and automatically generate compliant, production-ready configurations with organizational standards and guardrails built in.

This is an excellent opportunity for an engineer passionate about Terraform at scale, Azure platform engineering, developer experience, automation, and applying AI technologies to solve real-world infrastructure challenges.

Key Responsibilities

• Refine, harden, and extend the existing Terraform and Terragrunt IaC framework to improve consistency, maintainability, reliability, and quality across environments.
• Expand and standardize the Terraform module library by developing reusable modules across the Azure ecosystem.
• Embed secure defaults, standardized naming and tagging conventions, RBAC requirements, and policy guardrails into Terraform modules.
• Establish and enforce IaC quality standards using TFLint and related tooling, including linting, validation, automated testing, and pre-merge quality gates.
• Design and implement an AI-assisted infrastructure self-service platform using an IaC MCP (Model Context Protocol) server.
• Develop agent skills, context, instructions, and guardrails that enable developers using Claude Code or GitHub Copilot to discover approved Terraform modules and generate compliant infrastructure.
• Automate infrastructure change management through ServiceNow integrations, including change requests, approval workflows, and CMDB updates.
• Design and implement developer self-service workflows, scaffolding, golden paths, and automation through Port.io or similar developer-portal platforms.
• Build and maintain CI/CD and GitOps pipelines supporting automated infrastructure delivery.
• Develop supporting automation and tooling using PowerShell, Python, and Bash.
• Implement Microsoft Entra ID (Azure AD) identity and access patterns, including RBAC and least-privilege access.
• Collaborate closely with application and development teams to identify provisioning bottlenecks and continuously improve the infrastructure self-service experience.
• Promote platform-engineering principles, automation, standardization, and developer self-service across the organization.
• Mentor engineers and contribute to the growth and maturity of the platform engineering team.
• Ensure infrastructure automation meets security, reliability, compliance, and operational standards.

Required Skills & Experience

• Mastery-level expertise with Terraform and Terragrunt, including development of reusable modules and management of infrastructure at enterprise scale.
• Strong hands-on experience with TFLint and IaC quality tooling, including linting, validation, automated testing, and enforcement of coding standards.
• Deep hands-on Azure experience across both IaaS and PaaS services.
• Proven experience designing and maintaining standardized, reusable Terraform module libraries and opinionated IaC patterns.
• Strong scripting and automation skills using PowerShell, Python, and Bash.
• Extensive experience with CI/CD pipelines and GitOps-based infrastructure delivery.
• Experience with Microsoft Entra ID (Azure AD), RBAC, identity management, authentication, and least-privilege security models.
• Strong understanding of platform engineering and developer experience principles.
• Demonstrated ability to design secure, scalable, resilient, and highly automated infrastructure solutions.
• Strong troubleshooting, problem-solving, and systems-thinking capabilities.
• Excellent communication and collaboration skills with the ability to work effectively across engineering and development teams.

Preferred Qualifications

• Experience building, deploying, or integrating MCP (Model Context Protocol) servers.
• Experience exposing infrastructure tools, data, and workflows to AI coding assistants.
• Hands‑on experience with Claude Code, GitHub Copilot, or similar AI‑assisted development platforms.
• Experience configuring AI agent skills, context, instructions, and infrastructure guardrails.
• Experience with Port.io or other Internal Developer Portals such as Backstage.
• Experience integrating infrastructure deployment and change-management processes with ServiceNow or similar ITSM platforms.
• Experience with policy-as-code frameworks such as OPA/Conftest, Sentinel, or Azure Policy.
• Experience with IaC security scanning tools such as Checkov, tfsec, or Trivy.
• Experience with infrastructure testing frameworks such as Terratest or native Terraform testing.
• Familiarity with Kubernetes and Azure Kubernetes Service (AKS).
• Experience with configuration management and orchestration tools such as Ansible.
• Knowledge of monitoring, observability, incident response, and production operations.
• Experience working in enterprise platform engineering or cloud enablement environments.

Preferred Certifications

• HashiCorp Certified: Terraform Associate or Terraform Authoring & Operations Professional
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: DevOps Engineer Expert
• Certified Kubernetes Administrator (CKA)
• Other relevant cloud, DevOps, automation, security, or infrastructure certifications are a plus.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.