Terraform SME - Remote​/Telecommute

Job Description :

Pay Range: $55hr - $60hr

• We are seeking a highly experienced Terraform Subject Matter Expert to lead Infrastructure as Code initiatives with a Terraform-first approach on Azure.
• The role involves designing reusable Terraform modules, automating Azure services including AKS and Storage, implementing governance and RBAC as code, and driving CI/CD best practices.
• The ideal candidate will also lead Bicep to Terraform migration efforts and contribute to platform standardization, operational excellence, and developer enablement.

• Design and implement reusable Terraform modules for Azure infrastructure across development, test, and production environments.
• Build patterns for subscription and resource group organization, naming standards, tagging, and environment overlays.
• Implement automated plan and apply workflows, validation, drift detection, and safe environment promotion.
• Provision and manage AKS clusters via Terraform including node pools, networking, add-ons, policies, and baseline security.
• Enable repeatable cluster bootstrapping using Git Ops-ready patterns.
• Create and manage Azure Storage Accounts, containers, encryption, networking rules, private endpoints, and diagnostics.
• Implement RBAC and access management as code including role assignments, managed identities, service principals, and least-privilege models.
• Extend Terraform modules to support networking, security, compute, PaaS, and monitoring services.
• Collaborate with architecture and engineering teams to translate platform requirements into scalable Terraform patterns.
• Automate provisioning and configuration of Microsoft Fabric work spaces and related identity and permission setup.
• Assess existing Bicep infrastructure and lead migration to Terraform, including module mapping, resource imports, and phased rollout.
• Consolidate duplicated patterns and establish a shared Terraform module registry.
• Implement CI/CD pipelines including linting, validation, testing, security scanning, and policy checks.
• Establish best practices for Terraform state management, locking, secrets handling, and safe refactoring.
• Create documentation including module usage guides, onboarding materials, and operational runbooks.

• Strong hands-on expertise in Terraform including module design and versioning.
• Experience with Azure
  
  RM provider and related Azure providers.
• Deep understanding of Azure fundamentals including subscriptions, management groups, resource groups, networking, identity, and governance.
• Proven experience deploying and operating AKS through automation.
• Strong experience implementing Azure RBAC, managed identities, service principals, and group-based access models.
• Experience implementing least-privilege access controls and governance standards.
• CI/CD experience for Terraform workflows.
• Experience with remote state management, locking, imports, refactoring, and drift management.
• Experience with secret management and secure infrastructure practices.

• Extensive hands-on experience with Terraform in enterprise environments.
• Strong experience in Azure platform engineering.
• Experience automating AKS cluster lifecycle management.
• Experience implementing Infrastructure as Code governance and security best practices.

• Experience with Microsoft Fabric workspace provisioning and automation.
• Experience converting Client or Bicep infrastructure to Terraform.
• Experience with policy-as-code tools.
• Experience designing enterprise-scale Azure landing zones.
• Knowledge of Git Ops tooling and Kubernetes add-on management.

• Terraform module development and state management.
• Azure platform engineering and governance.
• AKS automation and Kubernetes integration.
• RBAC and identity governance.
• CI/CD pipeline implementation.
• Infrastructure security and compliance.
• Scripting using Power Shell, Python, or Bash.
• Infrastructure migration and standardization.

• Bachelor s degree in Computer Science, Information Technology, Engineering, or a related field.
• Relevant cloud or Terraform certifications preferred.