Staff Azure Cloud Engineer, Automation

Holthouse has this job in 1 other place

Fort Worth, TX

The role

Come for the Challenge. Stay for the Experience.

At Holthouse, we believe every challenge presents an opportunity to positively impact our clients and people. Talented and ambitious individuals who seek limitless professional opportunities thrive at Holthouse. Our team is known for its technical skill and ability to help clients address complex business issues all while investing in and supporting our people to provide a rewarding employee experience.

Tools and Stack You'll Work In

Azure (landing zone, networking, Entra ID) - Terraform + Terraform Cloud - Azure Verified Modules - GitHub Actions - Microsoft Defender for Cloud - Azure Policy - Azure Monitor / Log Analytics - GitHub Copilot / Anthropic Claude (AI-assisted delivery). Our policy-as-code and shift-left scanning has not been finalized; helping evaluate and select this tooling is part of the role.

An internal developer platform pattern for self-service application delivery (e.g. HashiCorp HCP Waypoint, which integrates with HCP Terraform).

As the Staff Azure Cloud Engineer, you will be responsible for, but not limited to, the following:

Design and build the Azure landing zone, aligned to Microsoft's Cloud Adoption Framework design areas (identity, network topology, resource organization, governance, management, security) and reviewed against the Well-Architected Framework's five pillars at each milestone.
Build with Azure Verified Modules (AVM) as the base layer, composing right-sized custom Terraform modules on top rather than hand-rolling every resource or adopting the full CAF Enterprise-Scale module wholesale.
Own the Terraform Cloud (TFC) setup end to end: workspace structure (one state file per workload per environment), variable sets, run triggers, and remote state strategy.
Own hands-on networking and firewall configuration: hub-spoke topology, NSGs, Azure Firewall, WAF rules, private endpoints, and DNS. There is no separate network architect on this program; you need to be able to design, configure, and troubleshoot these yourself, informed by the firm's existing network/security teams.
Work with internal teams to define our to-be cloud native software engineering practice and process, then codify it. Coding standards, module and repo conventions, branching and review workflow, policy-as-code approach, and the shift-left tooling chain (scanning, testing, gating) are not yet decided. You will work with the firm's existing security and engineering teams to land on a standard, and then turns that into working Terraform, pipelines, and documentation.
Establish policy-as-code guardrails (approach and tooling still to be decided, e.g. HashiCorp Sentinel, OPA, or another option you recommend and help evaluate) so that governance is enforced automatically on every plan
Build the CI/CD pipeline for infrastructure changes: automatic plan on every pull request, mandatory human review, manual apply gate
Help stand up our shift-left scanning practice: the goal is that IaC, code, and dependency issues are caught early in the engineering cycle.
Set up the security and observability baseline: Microsoft Defender for Cloud, centralized Log Analytics, Azure Policy at the management-group scope, hub-spoke network segmentation, and private endpoints.
Coordinate with the firm's identity/security and network teams on Entra ID architecture (app registrations, Conditional Access, PIM) and network/firewall standards.
Set the technical example for module structure, versioning, documentation, and code review standards that future hires on this program will follow as the team grows.
Extend the paved path from infrastructure to application delivery. Define a golden, self-service deployment pattern so Backend and Frontend engineers can ship application code onto the landing zone without hand-rolling their own pipelines.

Staff Azure Cloud Engineer, Automation

The role

Staff Azure Cloud Engineer, Automation

The role

What you need

Nice to have

Connect with us

We Live Our Core Values

Tools and Stack You'll Work In

LinkedIn, Instagram, Facebook, HCVT Website

About Holthouse

Holthouse