Terraform & Infrastructure as Code (IaC) Engineer

Project overview

We are looking for a Senior Terraform and Infrastructure as Code (IaC) Engineer to design, implement, and maintain automated, version-controlled cloud infrastructure using Terraform as the primary Infrastructure as Code (IaC) tool.

The role is responsible for ensuring infrastructure reproducibility, security, and governance throughout its lifecycle while promoting automation practices that minimize manual effort and operational risk.

Key Responsibilities

Key Requirements

Soft Skills

Other Details

• Design and develop reusable, parameterized Terraform modules.
• Manage remote state backends (e.g., S3 with DynamoDB, Azure Storage, Terraform Cloud) and implement state locking strategies.
• Build and maintain CI/CD pipelines for automated infrastructure provisioning, including controlled plan and apply workflows.
• Define and enforce governance policies through Policy as Code frameworks (e.g., Sentinel, OPA/Checkov, tfsec).
• Promote best practices for version control, code reviews, and repository organization.
• Integrate infrastructure provisioning processes with secrets management solutions such as HashiCorp Vault, AWS KMS, and Azure Key Vault.
• Document infrastructure architecture, Terraform modules, and operational procedures.
• Minimum 5 years of experience in cloud infrastructure engineering and operations.
• Minimum 3 years of hands-on experience with Terraform in production environments.
• Proven hands-on experience in production environments with Terraform (HCL).
• Strong experience with at least one major cloud provider: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Solid understanding of Terraform state management, workspaces, and module development.
• Proficiency with Git and modern branching strategies (e.g., GitFlow or trunk-based development).
• Experience building and maintaining CI/CD pipelines using tools such as GitLab CI, GitHub Actions, Azure DevOps, or Jenkins.
• Scripting skills using Bash and/or Python.
• Strong knowledge of networking, Identity and Access Management (IAM), and cloud security principles.
• Strong autonomy and a results-oriented mindset.
• Good technical documentation and communication skills.
• Team player with the ability to collaborate effectively with development teams in a DevOps environment.

Project details

1st week: 2 days onsite in Oeiras/Taguspark

2nd week: 2 days onsite in Oeiras/Taguspark

3rd week: Remote

• Start: flexible
• Duration: > 12 months
• Remote: hybrid
• Location: Lisbon, Portugal, PT
• Languages: Portuguese