Senior Terraform Infrastructure Engineer, Azure Migration

Bellevue, WA

Blueprint is a technology solutions firm headquartered in Bellevue, Washington, with teams across the United States. We help organizations turn complex challenges into meaningful outcomes by connecting strategy and execution across AI, cloud, data, product development, and emerging technology.

Our culture is built by people who care deeply about doing exceptional work. We set high standards, take ownership, and continually challenge ourselves and one another to be better. We work hard, support each other, and take genuine pride in what we deliver for our clients, partners, and teams.

At Blueprint, you’ll work alongside talented people with different experiences, expertise, and perspectives. You’ll have opportunities to take on meaningful challenges, expand your skills, and see the impact of what you build.

Blueprint is hiring a Senior Terraform Infrastructure Engineer to help modernize a business-critical application currently running on Azure Kubernetes Service and virtual machines. The project will move suitable APIs, web applications, background workers, and databases to Azure Container Apps and Azure SQL, introducing a more efficient serverless architecture with capabilities such as event-driven scaling and scale-to-zero.

You’ll take ownership of the infrastructure that makes this migration possible, translating the target architecture into secure, reusable Terraform and helping guide key platform decisions along the way. This includes evaluating complex AKS and VM workloads, identifying what can be modernized, and determining what should remain on its current platform because of networking, storage, operating system, or Kubernetes-specific dependencies. You’ll collaborate closely with engineering, security, data, and operations teams throughout assessment, design, testing, cutover, and rollback.

• Lead the Terraform architecture for migration landing zones, networking, identity, security, application platforms, databases, monitoring, and environment promotion.
• Build reusable Terraform modules and environments for Azure Virtual Networks, Private DNS, Private Endpoints, Network Security Groups, Azure Container Registry, Azure Container Apps, Azure SQL, Key Vault, managed identities, monitoring, and access controls.
• Manage Terraform providers, remote state, locking, environment separation, module versioning, drift detection, policy checks, plan reviews, and approved CI/CD promotion.
• Evaluate AKS workloads and troubleshoot control‑plane interactions, node pools, scheduling, taints, affinity, probes, Services, Ingress, DNS, network policies, CNI, storage, Stateful Sets, Daemon Sets, operators, custom resource definitions, admission controls, and workload identity.
• Assess containerized APIs and web applications for runtime dependencies, state management, configuration, database connections, health endpoints, startup behavior, scaling, ingress, egress, and external service dependencies.
• Assess Windows- and Linux-based applications hosted on Azure virtual machines, including scheduled tasks, local file dependencies, operating system integrations, certificates, ports, service accounts, and legacy deployment processes.
• Design Azure Container Apps environments for APIs, web applications, workers, jobs, and event-driven services using revisions, readiness checks, traffic splitting, rollback, KEDA, and scale-to-zero capabilities where appropriate.
• Containerize VM-hosted applications using secure OCI images, multi-stage builds, non-root execution, vulnerability scanning, structured logging, and reliable health probes.
• Determine when workloads must remain on AKS or virtual machines…