The need
•1 experienced "Lead Infrastructure as Code" profile to guide the IaC squad, accelerate technical decisions, secure delivery and scaling
•1 profile mainly dedicated to setting up the IaC offering
•Both profiles must demonstrate solid past experience in this type of transformation and have the human qualities needed to properly support and build culture within engineering teams
•Implementation of a hybridizable private internal cloud
•Multi-cloud deployments
•On-premise first approach
Appreciated skills
•Knowledge of Vault
•Experience with policy as code / governance
•Experience with GitOps / CI/CD workflows
•Ability to cleanly articulate Terraform with Ansible
•Knowledge of Terragrunt, Crossplane, API CRUD
Expected deliverables (examples)
•Terraform structuring blueprint
•Reference modules
•Naming standards
•Variable / secrets / state management standards
•Standard validation / plan / apply pipeline
•Contribution guide for squads
•Support REX (lessons learned report)
Context
•The Identity tribe is responsible for numerous technical solutions / Covéa foundations: IDM, VAULT, Entra ID, Secret ID, Okta, AD, DNS, DHCP, Keycloak, CoveAuth (Covéa IDP)
•The objective is to actively contribute to the Build and Run activities of the squads
Key skills
•Linux expertise & infrastructure services
•Automation & industrialization: Ansible, Terraform, Bash, Python
•Knowledge of OpenID Connect, SAML v2 (Keycloak) protocols and the Vault Hashicorp solution is a plus
Profile sought
•Experienced systems engineer / Linux administrator (DevSecOps orientation)
•Strong debugging and complex problem analysis skills
•Automation culture
•Minimum BAC+3 education, engineering degree or university degree
•Strong team spirit: able to cooperate, develop and lead collective / cross-functional work
•Adaptability, able to assess impacts and maintain efficiency
•Analysis and synthesis skills, able to study complex situations and write elaborate summary reports
•Experiment and innovate by adapting developments to the environment
Finer description of the general scope and expected skills for IaC
•Support squads in implementing managed infrastructure services in an on-premise context, with module standardization, state governance, security, and progressive team autonomy
Essential technical skills
•Excellent command of Terraform
•Design and maintenance of: reusable modules, multi-workspace / multi-stack environments according to the chosen model & variables / outputs / locals
•Dependency management and structuring of Terraform projects
Governance & industrialization
•Definition of standards: repository structure, naming conventions, versioning strategy, module organization
•Quality and reliability: validation, linting, checks, code reviews
•Management of Terraform pipelines
State management
•Mastery of remote backends
•Experience managing state with: S3-compatible backend & state locking
•Best practices for securing state
•Management of collisions, concurrency, restoration and remediation strategy
On-prem environment
•Experience with providers or integrations related to on-prem environments
•Ability to interface Terraform with layers: virtualization, network, storage & security
Essential cross-functional skills
•Ability to work in an industrialized environment and produce reusable standards
•Experience in quality improvement, standardization, documentation and skills transfer
•Mastery of principles of: Git / GitOps, branch management / merge requests / code review & code quality/security
•Excellent level of formalization: templates, standards, patterns, contribution guides & operational playbooks
Contract details
•Contract type: Freelance / Contract
•Daily rate: salary based on profile
•Location: 79000 Niort, France
•Work mode: Hybrid
•Published: October 26, 2026
