New

Senior Terraform Infrastructure Engineer, Azure Migration

Bellevue, WA

About Blueprint

Blueprint is a technology solutions firm headquartered in Bellevue, Washington, with teams across the United States. We help organizations turn complex challenges into meaningful outcomes by connecting strategy and execution across AI, cloud, data, product development, and emerging technology.

Our culture is built by people who care deeply about doing exceptional work. We set high standards, take ownership, and continually challenge ourselves and one another to be better. We work hard, support each other, and take genuine pride in what we deliver for our clients, partners, and teams.

At Blueprint, you’ll work alongside talented people with different experiences, expertise, and perspectives. You’ll have opportunities to take on meaningful challenges, expand your skills, and see the impact of what you build.

Bring your perspective. Raise the standard. Build what matters.

About the Role

Blueprint is hiring a Senior Terraform Infrastructure Engineer to help modernize a business-critical application currently running on Azure Kubernetes Service and virtual machines. The project will move suitable APIs, web applications, background workers, and databases to Azure Container Apps and Azure SQL, introducing a more efficient serverless architecture with capabilities such as event-driven scaling and scale-to-zero.

You’ll take ownership of the infrastructure that makes this migration possible, translating the target architecture into secure, reusable Terraform and helping guide key platform decisions along the way. This includes evaluating complex AKS and VM workloads, identifying what can be modernized, and determining what should remain on its current platform because of networking, storage, operating system, or Kubernetes-specific dependencies. You’ll collaborate closely with engineering, security, data, and operations teams throughout assessment, design, testing, cutover, and rollback.

What You'll Do

  • Lead the Terraform architecture for migration landing zones, networking, identity, security, application platforms, databases, monitoring, and environment promotion.
  • Build reusable Terraform modules and environments for Azure Virtual Networks, Private DNS, Private Endpoints, Network Security Groups, Azure Container Registry, Azure Container Apps, Azure SQL, Key Vault, managed identities, monitoring, and access controls.
  • Manage Terraform providers, remote state, locking, environment separation, module versioning, drift detection, policy checks, plan reviews, and approved CI/CD promotion.
  • Evaluate AKS workloads and troubleshoot control-plane interactions, node pools, scheduling, taints, affinity, probes, Services, Ingress, DNS, network policies, CNI, storage, StatefulSets, DaemonSets, operators, custom resource definitions, admission controls, and workload identity.
  • Assess containerized APIs and web applications for runtime dependencies, state management, configuration, database connections, health endpoints, startup behavior, scaling, ingress, egress, and external service dependencies.
  • Assess Windows- and Linux-based applications hosted on Azure virtual machines, including scheduled tasks, local file dependencies, operating system integrations, certificates, ports, service accounts, and legacy deployment processes.
  • Design Azure Container Apps environments for APIs, web applications, workers, jobs, and event-driven services using revisions, readiness checks, traffic splitting, rollback, KEDA, and scale-to-zero capabilities where appropriate.
  • Containerize VM-hosted applications using secure OCI images, multi-stage builds, non-root execution, vulnerability scanning, structured logging, and reliable health probes.
  • Determine when workloads must remain on AKS or virtual machines because of node dependencies, privileged access, operators, custom networking, persistent volumes, or operating system requirements.
  • Plan migrations from SQL Server or Azure SQL hosted on virtual machines to Azure SQL Database, Elastic Pools, SQL Managed Instance, or a retained virtual machine.
  • Manage database connections, validation, backups, cutover planning, rollback procedures, and measured capacity and performance sizing.
  • Establish observability, alerts, operational runbooks, security evidence, load testing, failure testing, and rollback procedures.
  • Partner with engineering, security, data, and operations stakeholders to document decisions and deliver a controlled migration.

What You'll Bring

  • At least eight years of experience in infrastructure engineering, platform engineering, cloud engineering, DevOps, or solution architecture.
  • At least five years of experience delivering production Azure environments with Terraform.
  • Expert knowledge of Terraform architecture and infrastructure as code, supported by at least seven years of relevant experience.
  • Expert knowledge of AKS internals and Kubernetes troubleshooting, supported by at least seven years of relevant experience.
  • Expert experience supporting containerized APIs and web applications, with at least seven years of relevant experience.
  • At least six years of experience with Azure migration architecture and platform selection.
  • At least five years of experience modernizing and migrating applications hosted on Azure virtual machines.
  • At least five years of experience with Docker or OCI images and container security.
  • At least four years of experience designing or supporting solutions using Azure Container Apps.
  • At least five years of experience with Azure networking and private connectivity.
  • At least four years of experience with managed identities, Microsoft Entra ID, Azure Key Vault, and role-based access control.
  • At least five years of experience with SQL Server or Azure SQL hosted on virtual machines, including migration and performance planning.
  • At least five years of experience with CI/CD, release automation, and rollback procedures.
  • At least four years of experience with Azure Monitor, Log Analytics, and production operations.
  • Demonstrated ownership of Terraform delivery for at least two VM- or AKS-based application and database migrations, including testing, security review, cutover, and rollback.
  • Ability to read application code and Kubernetes manifests to diagnose API, web runtime, networking, identity, database, and scaling issues.
  • Strong technical writing and communication skills, with the ability to work across engineering, security, data, and operations teams.

Preferred Qualifications

  • Microsoft Certified: Azure Solutions Architect Expert.
  • Microsoft Certified: DevOps Engineer Expert.
  • Certified Kubernetes Administrator.

Compensation

At Blueprint, we strive to offer competitive pay that reflects the value of our team members. Compensation for this role is influenced by a variety of factors, including skills, education, responsibilities, experience, and geographic market.

For candidates based in Washington State, the anticipated compensation range is $143,400 to $172,100 USD annually, with a midpoint of $157,600. Please note that we typically do not hire new employees at the top of the posted range. Actual starting pay will be determined based on experience, skills, and internal equity. The final compensation and job title may vary depending on the selected candidate’s qualifications.

Location and Employment Structure 

This role is open exclusively to candidates in the Seattle metropolitan area. The selected candidate must work onsite at the client’s Bellevue, Washington location five days per week.

This is a full-time engagement expected to last at least six months, with the potential for extension.

Benefits

Blueprint believes that healthy, supported employees do their best work. Eligible employees have access to a comprehensive benefits package that may include:

  • Medical, dental, and vision coverage
  • Flexible Spending Account (FSA)
  • 401(k) retirement plan
  • Competitive paid time off
  • Parental leave
  • Professional growth and development opportunities

Benefits and eligibility may vary based on role, employment status, and location.

Equal Employment Opportunity

Blueprint Technologies, LLC is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, pregnancy, childbirth or related medical conditions, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, marital or familial status, military or veteran status, citizenship status, or any other characteristic protected by applicable law.

Applicant Accommodations

If you need a reasonable accommodation to participate in any part of the application or interview process, please contact recruiting@bpcs.com.

Create a Job Alert

Interested in building your career at Blueprint Technologies? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...

While we value diverse global talent, Blueprint is unable to provide visa sponsorship for this role. Applicants must have ongoing authorization to work in the U.S. independently.

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Blueprint Technologies’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

We may use AI-assisted tools to support parts of the recruiting process, including identifying and evaluating candidates based on job-related qualifications and experience. Human recruiters and hiring managers remain actively involved in all hiring decisions. If you require a reasonable accommodation during the hiring process, please contact recruiting@bpcs.com.

Learn more