Senior Azure Infrastructure Automation Engineer

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Senior Azure Infrastructure Automation Engineer

Location(s): Warren, NJ

Job Overview We are seeking a hands-on Senior Azure Infrastructure Automation Engineer to help mature and expand our enterprise infrastructure delivery capabilities. The organization has an established Infrastructure-as-Code (IaC) framework and a strong foundation of Terraform modules. This role will build upon that foundation by expanding module coverage, strengthening the existing IaC ecosystem, and developing an AI-enabled self-service platform for infrastructure provisioning.

The primary mission is to enable secure, standardized infrastructure self-service. You will expand an opinionated Terraform module library and expose approved infrastructure patterns through an AI-enabled developer experience, allowing engineers to describe their infrastructure requirements and automatically generate compliant, production-ready configurations with organizational standards and guardrails built in.

This is an excellent opportunity for an engineer passionate about Terraform at scale, Azure platform engineering, developer experience, automation, and applying AI technologies to solve real-world infrastructure challenges.

Key Responsibilities

• Refine, harden, and extend the existing Terraform and Terragrunt IaC framework to improve consistency, maintainability, reliability, and quality across environments.
• Expand and standardize the Terraform module library by developing reusable modules across the Azure ecosystem.
• Embed secure defaults, standardized naming and tagging conventions, RBAC requirements, and policy guardrails into Terraform modules.
• Establish and enforce IaC quality standards using TFLint and related tooling, including linting, validation, automated testing, and pre-merge quality gates.
• Design and implement an AI-assisted infrastructure self-service platform using an IaC MCP (Model Context Protocol) server.
• Develop agent skills, context, instructions, and guardrails that enable developers using Claude Code or GitHub Copilot to discover approved Terraform modules and generate compliant infrastructure.
• Automate infrastructure change management through ServiceNow integrations, including change requests, approval workflows, and CMDB updates.
• Design and implement developer self-service workflows, scaffolding, golden paths, and automation through Port.io or similar developer-portal platforms.
• Build and maintain CI/CD and GitOps pipelines supporting automated infrastructure delivery.
• Develop supporting automation and tooling using PowerShell, Python, and Bash.
• Implement Microsoft Entra ID (Azure AD) identity and access patterns, including RBAC and least-privilege access.
• Collaborate closely with application and development teams to identify provisioning bottlenecks and continuously improve the infrastructure self-service experience.
• Promote platform-engineering principles, automation, standardization, and developer self-service across the organization.
• Mentor engineers and contribute to the growth and maturity of the platform engineering team.
• Ensure infrastructure automation meets security, reliability, compliance, and operational standards.

Required Skills & Experience

• Mastery-level expertise with Terraform and Terragrunt, including development of reusable modules and management of infrastructure at enterprise scale.
• Strong hands-on experience with TFLint and IaC quality tooling, including linting, validation, automated testing, and enforcement of coding standards.
• Deep hands-on Azure experience across both IaaS and PaaS services.
• Proven experience designing and maintaining standardized, reusable Terraform module libraries and opinionated IaC patterns.
• Strong scripting and automation skills using PowerShell, Python, and Bash.
• Extensive experience with CI/CD pipelines and GitOps-based infrastructure delivery.
• Experience with Microsoft Entra ID (Azure AD), RBAC, identity management, authentication, and least-privilege security models.
• Strong understanding of platform engineering and developer experience principles.
• Demonstrated ability to design secure, scalable, resilient, and highly automated infrastructure solutions.
• Strong troubleshooting, problem-so…