Summary
✨ AI‑Generated
Work on cloud infrastructure automation and secure delivery platforms. The role focuses on designing reusable pipelines, managing cloud environments, and implementing modern identity and governance practices.
Highlights
Hybrid cloud engineering role with long-term project duration and opportunities to design secure, reusable automation solutions.
Description
Azure DevOps Specialist – Terraform & Entra ID
Location: Montreal / Quebec City / Toronto
Work Model: Hybrid – 2 days onsite/week
Duration: Until March 2027, renewable
Languages: English + French required
Must-Have Skills
Strong Azure DevOps and YAML pipeline experience.Expert Terraform / Infrastructure as Code experience.Strong Microsoft Azure experience, including RBAC, Key Vault, Storage, and networking.Hands-on Microsoft Entra ID, App Registrations, and Microsoft Graph.Experience with WIF, Service Connections, reusable pipelines, and Terraform modules.Experience with Terraform AzureRM and Entra ID providers.Knowledge of OPA, DevSecOps, cloud governance, Zero Trust, and least privilege.Experience supporting multiple teams and Azure subscriptions.French and English are required.
Key Responsibilities
Design and implement shared, reusable Azure DevOps YAML pipelines and templates.Manage Azure Repos/Git, stages, environments, and secure Service Connections.Implement Workload Identity Federation (WIF) and secure authentication mechanisms.Automate deployment of Azure resources including Key Vault, Storage, networking, and other infrastructure.Configure Azure RBAC and enforce least-privilege access.Automate Microsoft Entra ID components, including App Registrations and permissions.Use Microsoft Graph for Entra ID automation.Develop reusable Terraform modules using AzureRM and Entra ID providers.Apply Terraform best practices for modules, state management, versioning, security, and reusability.Implement OPA / Policy as Code and automated security/compliance checks.Contribute to DevSecOps standards, cloud governance, documentation, and knowledge transfer.