Job Title: Infrastructure as Code (IaC) Engineer – Azure Bicep (Primary) Location: Calgary, Edmonton & Toronto, Canada

Required Skills Infrastructure as Code (IaC) Azure Bicep (Primary) Terraform (v1.5+) ARM Templates Cloud Platform Microsoft Azure (Multi-subscription environments, Hub-Spoke architecture) CI/CD GitHub Actions Azure DevOps Pipelines YAML-based workflows Version Control Git GitHub (Branching strategies, Pull Requests, Code Reviews) Scripting PowerShell Bash Python Security Azure Policy RBAC Azure Key Vault Managed Identity Private Endpoints Networking Virtual Networks (VNets) Subnets Network Security Groups (NSGs) DNS Load Balancers Application Gateways Monitoring Azure Monitor Application Insights Log Analytics KQL Containers Docker Azure Kubernetes Service (AKS) Testing & Validation Bicep Linter Bicep What-If PSRule for Azure Terraform Validate TFLint tfsec Checkov Job Description Azure Bicep Development (Primary) Serve as the subject matter expert for Azure Bicep and drive its adoption as the primary Infrastructure as Code (IaC) language for all new Azure deployments. Design and develop enterprise-grade Bicep module libraries with reusable parameters, outputs, user-defined types, and comprehensive documentation. Implement Bicep Template Specs and Module Registries (Azure Container Registry) for centralized module versioning and distribution. Develop Bicep parameter files (.bicepparam) for environment-specific configurations with type safety and validation. Build subscription and management group scope deployments for Azure Policy, RBAC, and Resource Group provisioning. Implement Deployment Stacks to manage resource lifecycle, prevent accidental deletion, and enforce governance. Migrate legacy ARM templates to Bicep using az bicep decompile. Perform What-If deployments and pre-deployment validation before production releases. Utilize advanced Bicep capabilities including user-defined types, functions, loops, conditional deployments, import statements, and batch sizing. Develop reusable patterns for Azure Landing Zones, Hub-Spoke networking, and enterprise deployment architectures. Integrate Bicep Linter rules and custom validations to maintain coding standards. Build CI/CD pipelines using GitHub Actions and Azure DevOps for automated validation, What-If analysis, and deployments. Develop Azure Verified Modules (AVM) aligned with organizational standards. Terraform Development & Operations (Secondary) Maintain and enhance existing Terraform modules following enterprise standards and DRY principles. Implement multi-environment deployments (Dev, Test, UAT, Production) using workspaces, backend configurations, and .tfvars files. Manage Terraform state securely using Azure Storage with state locking and encryption. Implement naming conventions, tagging strategies, and standardized variable management. Build CI/CD pipelines for automated Terraform Plan, Validate, and Apply workflows. Conduct code reviews to ensure quality, security, and compliance. Support migration initiatives from Terraform to Azure Bicep where applicable. Utilize Terraform for hybrid and multi-cloud infrastructure deployments where Azure-native Bicep is not suitable. Cloud Infrastructure & Architecture Design, deploy, and manage secure, scalable, and highly available Azure infrastructure. Implement enterprise networking, governance, monitoring, and security best practices. Collaborate with cross-functional teams to automate cloud infrastructure provisioning and deployment. Troubleshoot infrastructure deployment issues and optimize cloud environments for performance, reliability, and cost efficiency.