Senior Terraform Developer

<p><b>Senior Terraform / IaC Engineer — Azure Landing Zone</b></p><p><b>Practice</b></p><p>Cloud &amp; Infrastructure, Avanade India</p><p><b>Location</b></p><p>Bengaluru/NCR, India (Hybrid)</p><p></p><p><b>Experience</b></p><p>6–10 years overall in cloud infrastructure and platform engineering, with deep hands-on Terraform experience building Azure landing zones and provisioning Azure services as code</p><p></p><div><p><b>Role Summary</b></p></div><p>Avanade India’s Cloud &amp; Infrastructure practice is looking for a Senior Terraform / Infrastructure as Code Engineer to build enterprise Azure platforms for our clients. This is a deeply hands-on subject-matter-expert role — the person in it writes the Terraform that provisions the landing zone, and is measured on the quality and reusability of the code they produce.</p><p>You will work within the platform team on the landing zone build and on the Azure services that sit inside it, taking the target-state design and turning it into tested, reusable, parameterised Terraform that runs through automated pipelines. The role suits an engineer who wants to stay hands-on, set the standard for how infrastructure code is written, and be the go-to person on Terraform for the engagement.</p><p></p><div><p><b>Key Responsibilities</b></p></div><ul><li>Build Azure landing zones using Terraform — management groups, subscriptions, policy assignments, networking, identity and the core platform services that sit within them.</li><li>Write, structure and maintain reusable Terraform modules rather than one-off configurations — variables, locals, dynamic blocks, outputs and clean module interfaces.</li><li>Provision and configure Azure services as code: networking, Key Vault, storage, Log Analytics, compute, backup, private endpoints and policy assignments.</li><li>Parameterise a single codebase to deploy consistently across multiple environments and regions.</li><li>Design and manage Terraform state at scale — remote backends, state segmentation, locking and provider configuration.</li><li>Test and validate infrastructure code — terraform validate and plan, tflint, and a security scanner such as Checkov or tfsec, wired into the development workflow.</li><li>Work to proper Git discipline — feature branches, pull requests and meaningful code review, both giving and receiving.</li><li>Document modules properly — README, inputs and outputs, and worked examples so other engineers can consume them.</li><li>Support the CI/CD pipelines that deliver the infrastructure — Terraform plan and apply stages, approval gates, secrets handling and drift detection.</li><li>Write supporting automation in PowerShell, Bash or Python where Terraform alone is not the right tool.</li><li>Troubleshoot deployment failures, state issues and drift, and remediate them cleanly.</li><li>Act as the hands-on Terraform SME for the engagement — setting coding standards, reviewing others’ code and uplifting engineers around you.</li><li>Contribute reusable modules and patterns back to the practice IP library.</li></ul><div><p></p><p><b>Required Skills &amp; Experience</b></p></div><ul><li>6–10 years of overall experience in cloud infrastructure, platform engineering or infrastructure automation, with a substantial recent focus on Microsoft Azure.</li><li>Strong hands-on Terraform (HCL) — modules, variables, locals, dynamic blocks, outputs, and dependency and provider management.</li><li>Demonstrated experience building and testing reusable modules rather than writing one-off configurations.</li><li>Experience building Azure landing zone components with Terraform, aligned to Cloud Adoption Framework patterns.</li><li>Hands-on Azure resource experience: networking, Key Vault, storage, Log Analytics, policy assignments, compute and identity.</li><li>Comfortable parameterising a single codebase across multiple environments and regions.</li><li>Terraform state management at scale — remote backends, state design and access model.</li><li>Familiarity with terraform validate and plan, tflint, and a security scanner (Checkov or tfsec).</li><li>Git discipline: feature branches, pull requests and meaningful code review.</li><li>Proper module documentation — README, inputs/outputs and examples.</li><li>Clear communication with architects, engineers and client technical teams.</li></ul><div><p></p><p><b>Preferred / Good to Have</b></p></div><ul><li>Scripting in PowerShell, Bash or Python for supporting automation.</li><li>DevOps capability for infrastructure delivery: multi-stage YAML pipelines in Azure DevOps (or GitHub Actions), Terraform CI (format, validate, lint, security scan on pull requests) and CD (plan and apply stages, environments, approval gates).</li><li>Service connections and workload identity federation in place of long-lived secrets; securing the Terraform state backend.</li><li>Release management practice — branching and release strategy, artifact management and agent pools.</li><li>Scheduled drift detection, pipeline health monitoring and platform monitoring with Azure Monitor and Log Analytics.</li><li>Certifications: HashiCorp Terraform Associate, AZ-104, AZ-400 or AZ-305.</li><li>Experience with Azure Landing Zone accelerators (Terraform ALZ modules / Enterprise-Scale).</li><li>Exposure to Bicep or ARM, and to AWS or GCP providers.</li><li>Experience in a global delivery / SI environment (Avanade, Accenture, or similar) working with distributed teams.</li></ul>

<p>.</p>