We are looking for a highly skilled Azure Infrastructure Engineer with deep expertise in Terraform to design, implement, and maintain secure, scalable, and highly available Azure cloud infrastructure using Infrastructure as Code (IaC). This role will be responsible for building production-grade Azure environments that follow industry best practices for identity & access management, security hardening, scalability, resiliency, and disaster recovery, while enabling automated deployments through CI/CD pipelines

• Infrastructure as Code (IaC) • Design, develop, and maintain Terraform modules for Azure infrastructure following modular, reusable, and versioned patterns • Enforce idempotent, repeatable deployments across multiple environments (Dev, QA, UAT, Prod) • Maintain Terraform remote state securely using Azure Storage with state locking and RBAC • Implement environment isolation and naming conventions aligned with enterprise standards • Azure Architecture & Services (Project-Specific) • Provision and manage Azure resources using Terraform for this project, including: • Networking • Azure Virtual Network (VNet) with environment isolation (Dev / QA / UAT / Prod) • Subnets for: • API / App Services integration • Azure API Management (APIM) • Azure Database for PostgreSQL (Private Endpoint) • Network Security Groups (NSGs) with least-privilege inbound/outbound rules • Route Tables (UDRs) where required for controlled traffic flow • Private Endpoints for PaaS services to avoid public exposure • API & Application Layer • Azure API Management (APIM) – mandatory API gateway for all backend services • VNet-integrated APIM (Internal or External mode as per environment) • Azure App Service (Linux) for hosting backend APIs • Azure Apps (preferred for future scalability) • Managed Identities for secure service-to-service communication

Mandatory • Strong hands-on experience with Terraform (Azure provider) • Deep knowledge of Microsoft Azure core services • Experience designing production-grade cloud architectures • Strong understanding of: o Networking (VNet, DNS, private connectivity) o Identity & security (RBAC, Managed Identity, Key Vault) • Experience with multi-environment Azure deployments • Familiarity with Azure Well-Architected Framework