Senior Terraform Infrastructure Engineer, Azure Migration

📋 Job Overview

Blueprint is a technology solutions firm headquartered in Bellevue, Washington, with teams across the United States. We help organizations turn complex challenges into meaningful outcomes by connecting strategy and execution across AI, cloud, data, product development, and emerging technology. Our culture is built by people who care deeply about doing exceptional work. We set high standards, take ownership, and continually challenge ourselves and one another to be better. We work hard, support each other, and take genuine pride in what we deliver for our clients, partners, and teams.

🏢 About Blueprint

Blueprint Technologies, LLC is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, pregnancy, childbirth or related medical conditions, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, marital or familial status, military or veteran status, citizenship status, or any other characteristic protected by applicable law.

🎯 The Role

You’ll take ownership of the infrastructure that makes this migration possible, translating the target architecture into secure, reusable Terraform and helping guide key platform decisions along the way. This includes evaluating complex AKS and VM workloads, identifying what can be modernized, and determining what should remain on its current platform because of networking, storage, operating system, or Kubernetes-specific dependencies. You’ll collaborate closely with engineering, security, data, and operations teams throughout assessment, design, testing, cutover, and rollback.

✅ Key Responsibilities

• Build reusable Terraform modules and environments for Azure Virtual Networks, Private DNS, Private Endpoints, Network Security Groups, Azure Container Registry, Azure Container Apps, Azure SQL, Key Vault, managed identities, monitoring, and access controls.
• Manage Terraform providers, remote state, locking, environment separation, module versioning, drift detection, policy checks, plan reviews, and approved CI/CD promotion.
• Evaluate AKS workloads and troubleshoot control-plane interactions, node pools, scheduling, taints, affinity, probes, Services, Ingress, DNS, network policies, CNI, storage, StatefulSets, DaemonSets, operators, custom resource definitions, admission controls, and workload identity.
• Determine when workloads must remain on AKS or virtual machines because of node dependencies, privileged access, operators, custom networking, persistent volumes, or operating system requirements.
• Plan migrations from SQL Server or Azure SQL hosted on virtual machines to Azure SQL Database, Elastic Pools, SQL Managed Instance, or a retained virtual machine.
• Manage database connections, validation, backups, cutover planning, rollback procedures, and measured capacity and performance sizing.
• Establish observability, alerts, operational runbooks, security evidence, load testing, failure testing, and rollback procedures.
• Partner with engineering, security, data, and operations stakeholders to document decisions and deliver a controlled migration.

📌 Required Qualifications

• At least eight years of experience in infrastructure engineering, platform engineering, cloud engineering, DevOps, or solution architecture.
• At least five years of experience delivering production Azure environments with Terraform.
• Expert knowledge of Terraform architecture and infrastructure as code, supported by at least seven years of relevant experience.
• Expert knowledge of AKS internals and Kubernetes troubleshooting, supported by at least seven years of relevant experience.
• At least six years of experience with Azure migration architecture and platform selection.
• At least five years of experience with Docker or OCI images and container security.
• At least four years of experience designing or supporting solutions using Azure Container Apps.
• At least five years of experience with Azure networking and private connectivity.
• At least four years of experience with managed identities, Microsoft Entra ID, Azure Key Vault, and role-based access control.
• At least five years of experience with SQL Server or Azure SQL hosted on virtual machines, including migration and performance planning.
• At least five years of experience with CI/CD, release automation, and rollback procedures.
• At least four years of experience with Azure Monitor, Log Analytics, and production operations.
• Strong technical writing and communication skills, with the ability to work across engineering, security, data, and operations teams.

⭐ Desirable Experience

• Microsoft Certified: Azure Solutions Architect Expert.
• Microsoft Certified: DevOps Engineer Expert.
• Certified Kubernetes Administrator.

🎁 Benefits

At Blueprint, we strive to offer competitive pay that reflects the value of our team members. Compensation for this role is influenced by a variety of factors, including skills, education, responsibilities, experience, and geographic market. For candidates based in Washington State, the anticipated compensation range is $143,400 to $172,100 USD annually, with a midpoint of $157,600. Please note that we typically do not hire new employees at the top of the posted range. Actual starting pay will be determined based on experience, skills, and internal equity. The final compensation and job title may vary depending on the selected candidate’s qualifications.

Blueprint believes that healthy, supported employees do their best work. Eligible employees have access to a comprehensive benefits package that may include:

• Medical, dental, and vision coverage
• Flexible Spending Account (FSA)
• 401(k) retirement plan
• Competitive paid time off
• Parental leave
• Professional growth and development opportunities

🛂 Visa & Eligibility

This role is open exclusively to candidates in the Seattle metropolitan area. The selected candidate must work onsite at the client’s Bellevue, Washington location five days per week. This is a full-time engagement expected to last at least six months, with the potential for extension.