Senior Terraform and Infrastructure as Code (IaC) Engineer

Quick Facts

• Role: Senior Terraform and Infrastructure as Code (IaC) Engineer

Description

We are looking for a Senior Terraform and Infrastructure as Code (IaC) Engineer to design, implement, and maintain automated, version-controlled cloud infrastructure using Terraform. The role ensures infrastructure reproducibility, security, and governance throughout its lifecycle while promoting automation practices that minimize manual effort and operational risk.

Responsibilities

• Design and develop reusable, parameterized Terraform modules.
• Manage remote state backends (e.g., S3 with DynamoDB, Azure Storage, Terraform Cloud) and implement state locking strategies.
• Build and maintain CI/CD pipelines for automated infrastructure provisioning, including controlled plan and apply workflows.
• Define and enforce governance policies through Policy as Code frameworks (e.g., Sentinel, OPA/Checkov, tfsec).
• Promote best practices for version control, code reviews, and repository organization.
• Integrate infrastructure provisioning processes with secrets management solutions (e.g., HashiCorp Vault, AWS KMS, Azure Key Vault).
• Document infrastructure architecture, Terraform modules, and operational procedures.

Requirements

• Minimum 5 years of experience in cloud infrastructure engineering and operations.
• Minimum 3 years of hands-on experience with Terraform in production environments.
• Proven hands-on experience in production environments with Terraform (HCL).
• Strong experience with at least one major cloud provider: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Solid understanding of Terraform state management, workspaces, and module development.
• Proficiency with Git and modern branching strategies (e.g., GitFlow or trunk-based development).
• Experience building and maintaining CI/CD pipelines using GitLab CI, GitHub Actions, Azure DevOps, or Jenkins.
• Scripting skills using Bash and/or Python.
• Strong knowledge of networking, Identity and Access Management (IAM), and cloud security principles.

Benefits

• Onsite/remote work mix: 2 days onsite in Oeiras/Taguspark in week 1, 2 days onsite in week 2, then remote from week 3.