Staff Software Engineer - Terraform (Infrastructure as Code), Python, Jenkins & Groovy

Scope:

• Core responsibility: Architect and implement Infrastructure as Code (IaC) and CI/CD automation for Azure-based environments, ensuring scalability, security, and operational excellence.
• The role requires strong technical depth in Terraform, Python, Jenkins, Azure IaaS, and network/security components (App Gateway, Azure Firewall, F5), combined with qualities to mentor engineers and enforce engineering standards.

Our Current Technical Environment:

• IaC & Automation: Terraform, Python, PowerShell
• CI/CD: Jenkins (Groovy pipelines), GitHub Actions
• Cloud Platform: Microsoft Azure (VMs, VNets, NSGs, Load Balancers, Application Gateway, Azure Firewall, Key Vault, Managed Identities, Azure Policy)
• Networking & Security: F5 Load Balancers, RBAC, Policy-as-Code, Secret Management
• Observability: Azure Monitor, Log Analytics
• Collaboration Tools: GitHub, Shared Libraries, Documentation Standards

What you’ll do:

• Infrastructure as Code (IaC)
  • Design and modularize Terraform for Azure IaaS (VMs, VNets, NSGs, Load Balancers, Application Gateway, Azure Firewall, Storage, Key Vault).
  • Build Python utilities to orchestrate Terraform (state handling, drift checks, compliance validations, dynamic variable generation).
• CI/CD & Pipelines
  • Develop and optimize Jenkins pipelines using Groovy (multi-branch, shared libraries, parallel stages).
  • Integrate pipelines with GitHub (Actions/Webhooks), enforce code review policies and branch protections.
• Azure Platform & Network Engineering
  • Provision and manage Azure resources with tagging, policies, RBAC, and cost controls.
  • Automate image builds, VM scale sets, and environment rollouts (DEV/QA/UAT/PROD).
  • Configure and automate Azure Application Gateway, Azure Firewall, and F5 Load Balancers for secure traffic management.
• Security & Compliance
  • Integrate Azure Key Vault for secrets, enforce least privilege via RBAC/Managed Identities.
  • Embed security scans (SAST, secret scanning) and policy gates in pipelines.
• Observability & Reliability
  • Implement monitoring, health checks, canary deployments, and automated rollbacks.
  • Own incident triage/playbooks and improve MTTR through proactive automation.
• Collaboration & Governance
  • Partner with app teams to translate requirements into reusable infrastructure patterns.
  • Contribute to standards, documentation, and reusable modules/libraries.

What we are looking for:

• Bachelor’s degree (STEM preferred) and minimum 11 to 13 years of experience in Devops or Site Reliability Engineering
• Programming: Strong Python (CLI tools, API integrations, config generation, unit testing).
• IaC: Expert in Terraform (modules, workspaces, remote state, lifecycle rules).
• Pipelines: Proficient in Jenkins & Groovy (shared libs, credentials, matrix builds).
• SCM: GitHub workflows—PR strategies, branch protection, GitHub Actions (bonus).
• Azure IaaS & Networking: VMs, VMSS, VNets, NSGs, Load Balancers, Application Gateway, Azure Firewall, F5 Load Balancers, Storage, Key Vault, RBAC, Azure Policy.
• Security & Ops: Secret management, vulnerability scanning, logging/metrics, on-call readiness.
• Foundational DevOps: Git, semantic versioning, artifact management, change management.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.