Job details:

• Role: Senior Cloud Infrastructure Engineer
• Full-time
• Remote
• Start: ASAP
• End: 30/06/2027

Scope:

• Core Responsibilities IaC Framework & Architecture (Hands-On + Design) • Design, build, and evolve our Terraform + Terragrunt-based IaC framework for enterprise-scale Azure deployments
• Own Terraform state management strategy — remote backends, workspace isolation, state locking, recovery patterns, and migration strategies
• Define and implement deployment strategies — blue/green, canary, ring-based rollouts, environment promotion patterns
• Establish drift detection mechanisms — automated detection, alerting, remediation workflows, and reconciliation patterns
• Author reusable, modular Terraform modules and Terragrunt configurations following DRY and composability principles • Set architectural direction for multi-subscription, multi-region, multi-tenant infrastructure patterns Azure Infrastructure & Security
• Apply deep knowledge of Azure resources — networking, compute, storage, identity (Entra ID), Key Vault, AKS, App Service, API Management, Azure Policy, Defender for Cloud, and more
• Design and implement resources with security as a first-class concern — private endpoints, managed identities, RBAC, encryption at rest/in transit, network isolation, secret rotation
• Embed security guardrails into IaC modules (least privilege by default, secure baselines, compliance patterns) •
• Partner with security teams on Defender for Cloud recommendations, policy compliance, and secure-by-default patterns DevOps Pipelines, Guardrails & Automation
• Design and maintain Azure DevOps (ADO) pipelines for IaC — plan/apply workflows, approval gates, secret handling, environment promotion
• Build guardrails and policy-as-code — OPA/Conftest, Azure Policy, Checkov, tfsec, custom validation gates
• Automate common infrastructure operations using PowerShell — including our existing IaC blueprint automation framework
• Design CI/CD patterns for infrastructure with proper testing (module tests, integration tests, compliance tests)
• Own pipeline reliability, performance, and developer experience AI Agents, MCP & Self-Service Platforms • Understand and apply MCP (Model Context Protocol) in the infrastructure context — how MCP servers expose infra tools, resources, and skills to AI agents
• Design agentic AI workflows for infrastructure — how agents plan, invoke tools, handle failures, and execute self-service actions safely
• Build and evolve self-service developer experiences using Internal Developer Platforms (Port or Backstage) — blueprints, scorecards, actions, and integrations
• Integrate IDPs with our IaC framework so developers can provision infrastructure through guided, guardrailed self-service — not raw Terraform • Explore and pilot AI-augmented infra operations — assisted troubleshooting, drift explanation, cost optimization suggestions, security recommendation triage

SNI sp. z o.o. will process personal data for the purpose of the recruitment process in accordance with Data Privacy Policy. The data may also be stored and processed for future recruitment purposes, in accordance with the given consent.