Required Skills

- CI/CD
- GitHub Actions, Azure DevOps Pipelines, YAML-based workflows
- Version Control
- Git, GitHub (branching strategies, PR workflows, code reviews)
- Scripting
- PowerShell, Bash, Python
- Security
- Networking
- VNets, Subnets, NSGs, DNS, Load Balancers, Application Gateways
- Monitoring
- Containers
- Testing
- Bicep linter, Bicep what-if, PSRule for Azure, Terraform validate, tflint, tfsec, checkov

Required Skills

- IaC Tools
- Azure Bicep (primary), Terraform (v1.5+), ARM Templates
- Cloud Platform
- Microsoft Azure (multi-subscription, hub-spoke topologies)
- CI/CD
- GitHub Actions, Azure DevOps Pipelines, YAML-based workflows
- Version Control
- Git, GitHub (branching strategies, PR workflows, code reviews)
- Scripting
- PowerShell, Bash, Python
- Security
- Azure Policy, RBAC, Key Vault, Managed Identity, Private Endpoints
- Networking
- VNets, Subnets, NSGs, DNS, Load Balancers, Application Gateways
- Monitoring
- Azure Monitor, Application Insights, Log Analytics, KQL
- Containers
- Docker, AKS (Kubernetes fundamentals)
- Testing
- Bicep linter, Bicep what-if, PSRule for Azure, Terraform validate, tflint, tfsec, checkov

Description

- Azure Bicep Development (Primary)
- Serve as a subject matter expert on Azure Bicep, driving adoption as the primary IaC language for all recent Azure deployments
- Design and build enterprise Bicep module libraries with well-defined parameters, outputs, user-defined types, and comprehensive documentation
- Implement Bicep template specs and module registries (Azure Container Registry) for centralized module versioning and distribution across teams
- Author Bicep parameter files (.bicepparam) for environment-specific configurations with type safety and validation
- Develop subscription-scope and management-group-scope deployments for Azure Policy, RBAC,



and resource group provisioning
- Build deployment stacks to manage lifecycle of resources, prevent accidental deletion, and enforce deny settings
- Perform ARM template decompilation (az bicep decompile) to migrate legacy JSON templates to Bicep
- Implement what-if deployments (az deployment group what-if) and preflight validation before production rollouts
- Leverage Bicep extensibility features including user-defined types, functions, and import statements for modular design
- Create reusable patterns for common Azure topologies: hub-spoke networking, landing zones, and spoke deployments
- Integrate Bicep linter rules and custom linter configurations to enforce coding standards across teams
- Build CI/CD pipelines for Bicep using GitHub Actions / Azure DevOps with automated validate, what-if, and deploy stages
- Develop Bicep-based Azure Verified Modules (AVM) patterns for organizational standards
- Apply conditional deployments, loops, and batch sizing for complex multi-resource provisioning
- Terraform Development & Operations (Secondary)
- Maintain and enhance existing Terraform modules following DRY principles and enterprise standards
- Implement multi-environment deployments (dev, test, UAT, prod) using workspaces, backend configs, and .tfvars files
- Manage Terraform state securely using Azure Storage backends with state locking and encryption
- Develop and enforce naming conventions, tagging strategies, and variable management patterns
- Build CI/CD pipelines (GitHub Actions / Azure DevOps) for automated plan, validate, and apply workflows
- Conduct code reviews for Terraform pull requests ensuring quality, security, and compliance
- Support migration efforts from Terraform to Bicep where strategically appropriate
- Leverage Terraform for multi-cloud or hybrid scenarios where Azure-native Bicep is not applicable
- Cloud Infrastructure & Architecture

#J-18808-Ljbffr

📌 Infrastructure as Code (IaC) Engineer (Calgary)
🏢 W3Global
📍 Calgary