Staff Engineer Jobs in Irvine, CA
Staff Engineer jobs in Irvine are concentrated in the Irvine Spectrum, Irvine Business Complex, and the tech corridor near UCI Research Park, with strong demand across enterprise software, semiconductors, and medtech. Employers hiring right now include Rivian, Langan Engineering and Environmental Services, and Terran Orbital. Find a role that fits below and apply directly.
Find Staff Engineer JobsOverview
Showing 5 of 1,453+ Staff Engineer jobs
About the Role
We are creating a new Azure cloud platform to serve as the foundation for a multi-year cloud modernization program. We need a Lead Azure Cloud Engineer who can walk in, take design ownership, and start building in week one. This is a hands-on, individual-contributor role: you will write the code yourself, stand up the pipelines yourself, and set the technical bar the rest of the teams build against.
You are the senior-most and dedicated cloud engineering voice on this program. You need to be well-rounded: as comfortable troubleshooting a firewall rule or a network route as you are writing a Terraform module or designing the pipeline that deploys it. You will need to work with the firm's existing IT, security, and network teams to land on shared standards, and then you're the one who codifies them into automation.
Tools and Stack You'll Work In
Azure (landing zone, networking, Entra ID) - Terraform + Terraform Cloud - Azure Verified Modules - GitHub Actions - Microsoft Defender for Cloud - Azure Policy - Azure Monitor / Log Analytics - GitHub Copilot / Anthropic Claude (AI-assisted delivery). Our policy-as-code and shift-left scanning has not been finalized; helping evaluate and select this tooling is part of the role.
An internal developer platform pattern for self-service application delivery (e.g. HashiCorp HCP Waypoint, which integrates with HCP Terraform).
As the Staff Azure Cloud Engineer, you will be responsible for, but not limited to, the following:
- Design and build the Azure landing zone, aligned to Microsoft's Cloud Adoption Framework design areas (identity, network topology, resource organization, governance, management, security) and reviewed against the Well-Architected Framework's five pillars at each milestone.
- Build with Azure Verified Modules (AVM) as the base layer, composing right-sized custom Terraform modules on top rather than hand-rolling every resource or adopting the full CAF Enterprise-Scale module wholesale.
- Own the Terraform Cloud (TFC) setup end to end: workspace structure (one state file per workload per environment), variable sets, run triggers, and remote state strategy.
- Own hands-on networking and firewall configuration: hub-spoke topology, NSGs, Azure Firewall, WAF rules, private endpoints, and DNS. There is no separate network architect on this program; you need to be able to design, configure, and troubleshoot these yourself, informed by the firm's existing network/security teams.
- Work with internal teams to define our to-be cloud native software engineering practice and process, then codify it. Coding standards, module and repo conventions, branching and review workflow, policy-as-code approach, and the shift-left tooling chain (scanning, testing, gating) are not yet decided. You will work with the firm's existing security and engineering teams to land on a standard, and then turns that into working Terraform, pipelines, and documentation.
- Establish policy-as-code guardrails (approach and tooling still to be decided, e.g. HashiCorp Sentinel, OPA, or another option you recommend and help evaluate) so that governance is enforced automatically on every plan
- Build the CI/CD pipeline for infrastructure changes: automatic plan on every pull request, mandatory human review, manual apply gate
- Help stand up our shift-left scanning practice: the goal is that IaC, code, and dependency issues are caught early in the engineering cycle.
- Set up the security and observability baseline: Microsoft Defender for Cloud, centralized Log Analytics, Azure Policy at the management-group scope, hub-spoke network segmentation, and private endpoints.
- Coordinate with the firm's identity/security and network teams on Entra ID architecture (app registrations, Conditional Access, PIM) and network/firewall standards.
- Set the technical example for module structure, versioning, documentation, and code review standards that future hires on this program will follow as the team grows.
- Extend the paved path from infrastructure to application delivery. Define a golden, self-service deployment pattern so Backend and Frontend engineers can ship application code onto the landing zone without hand-rolling their own pipelines.
We expect that our Staff Azure Cloud Engineer will have the following qualifications:
- 6+ years in cloud infrastructure/platform engineering, with real production ownership, not just POCs.
- A well-rounded Azure Cloud generalist, comfortable across Terraform/IaC, Azure networking, and firewalls/network security,
- Deep, hands-on Terraform experience: module authorship, remote state, workspace/environment strategy, version pinning, and awareness of the tradeoffs in monorepo vs. per-module repo structures.
- Strong, hands-on Azure networking and security: hub-spoke topology, NSGs, Azure Firewall, WAF rules, private endpoints, DNS, and hybrid/legacy connectivity patterns, plus identity (Entra ID, RBAC, managed identity) and governance (management groups, Azure Policy).
- Working knowledge of SOC 2 control families (access control, change management, logging/monitoring, network security) well enough to design a landing zone that satisfies them by default, even without prior formal audit experience.
- Able to work effectively with the firm's existing security, network, and IT teams
- Direct experience building CI/CD pipelines for infrastructure changes (GitHub Actions, Azure DevOps, or equivalent), including plan/apply gating patterns.
- Working knowledge of policy-as-code approaches (e.g. Sentinel, OPA) and IaC/security scanning practices.
- Comfortable being the first cloud engineer on the program: able to make and defend decisions yourself.
- Strong scripting ability (PowerShell, Bash, or Python) for tooling and automation glue.
- Comfortable defining a self-service application deployment pattern (a “golden path”) that other engineers can use to ship application code without needing deep Terraform expertise themselves.
Preferred Qualifications
- Direct experience with Terraform Cloud/Enterprise specifically (not just open-source Terraform CLI).
- Prior experience building a landing zone from zero, versus inheriting and extending one.
- Experience consuming (or ideally contributing to) Azure Verified Modules.
- Direct experience operating in a compliance-driven environment (SOC 2, HIPAA, or similar) through an actual audit cycle, where controls needed to be demonstrable, not just implemented.
- Experience mentoring other infrastructure/platform engineers.
- Experience with HashiCorp HCP Waypoint, or a similar internal developer platform (IDP) approach, for standardizing self-service application deployment.
- HashiCorp Terraform Associate or Professional certification.
- Microsoft certifications: AZ-305 (Solutions Architect) and/or AZ-400 (DevOps Engineer); AZ-500 (Security) is a plus.
You Matter - HCVT provides a variety of benefits and perks that help sustain a healthy and thriving work environment.
- Visit the Benefits section to learn more.
The ordinance requires employers to state, in all job solicitations, postings and advertisements, that the employer will consider applicants in a manner consistent with the requirements of the Fair Chance Initiative.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
About the Role
We are creating a new Azure cloud platform to serve as the foundation for a multi-year cloud modernization program. We need a Lead Azure Cloud Engineer who can walk in, take design ownership, and start building in week one. This is a hands-on, individual-contributor role: you will write the code yourself, stand up the pipelines yourself, and set the technical bar the rest of the teams build against.
You are the senior-most and dedicated cloud engineering voice on this program. You need to be well-rounded: as comfortable troubleshooting a firewall rule or a network route as you are writing a Terraform module or designing the pipeline that deploys it. You will need to work with the firm's existing IT, security, and network teams to land on shared standards, and then you're the one who codifies them into automation.
Tools and Stack You'll Work In
Azure (landing zone, networking, Entra ID) - Terraform + Terraform Cloud - Azure Verified Modules - GitHub Actions - Microsoft Defender for Cloud - Azure Policy - Azure Monitor / Log Analytics - GitHub Copilot / Anthropic Claude (AI-assisted delivery). Our policy-as-code and shift-left scanning has not been finalized; helping evaluate and select this tooling is part of the role.
An internal developer platform pattern for self-service application delivery (e.g. HashiCorp HCP Waypoint, which integrates with HCP Terraform).
As the Staff Azure Cloud Engineer, you will be responsible for, but not limited to, the following:
- Design and build the Azure landing zone, aligned to Microsoft's Cloud Adoption Framework design areas (identity, network topology, resource organization, governance, management, security) and reviewed against the Well-Architected Framework's five pillars at each milestone.
- Build with Azure Verified Modules (AVM) as the base layer, composing right-sized custom Terraform modules on top rather than hand-rolling every resource or adopting the full CAF Enterprise-Scale module wholesale.
- Own the Terraform Cloud (TFC) setup end to end: workspace structure (one state file per workload per environment), variable sets, run triggers, and remote state strategy.
- Own hands-on networking and firewall configuration: hub-spoke topology, NSGs, Azure Firewall, WAF rules, private endpoints, and DNS. There is no separate network architect on this program; you need to be able to design, configure, and troubleshoot these yourself, informed by the firm's existing network/security teams.
- Work with internal teams to define our to-be cloud native software engineering practice and process, then codify it. Coding standards, module and repo conventions, branching and review workflow, policy-as-code approach, and the shift-left tooling chain (scanning, testing, gating) are not yet decided. You will work with the firm's existing security and engineering teams to land on a standard, and then turns that into working Terraform, pipelines, and documentation.
- Establish policy-as-code guardrails (approach and tooling still to be decided, e.g. HashiCorp Sentinel, OPA, or another option you recommend and help evaluate) so that governance is enforced automatically on every plan
- Build the CI/CD pipeline for infrastructure changes: automatic plan on every pull request, mandatory human review, manual apply gate
- Help stand up our shift-left scanning practice: the goal is that IaC, code, and dependency issues are caught early in the engineering cycle.
- Set up the security and observability baseline: Microsoft Defender for Cloud, centralized Log Analytics, Azure Policy at the management-group scope, hub-spoke network segmentation, and private endpoints.
- Coordinate with the firm's identity/security and network teams on Entra ID architecture (app registrations, Conditional Access, PIM) and network/firewall standards.
- Set the technical example for module structure, versioning, documentation, and code review standards that future hires on this program will follow as the team grows.
- Extend the paved path from infrastructure to application delivery. Define a golden, self-service deployment pattern so Backend and Frontend engineers can ship application code onto the landing zone without hand-rolling their own pipelines.
We expect that our Staff Azure Cloud Engineer will have the following qualifications:
- 6+ years in cloud infrastructure/platform engineering, with real production ownership, not just POCs.
- A well-rounded Azure Cloud generalist, comfortable across Terraform/IaC, Azure networking, and firewalls/network security,
- Deep, hands-on Terraform experience: module authorship, remote state, workspace/environment strategy, version pinning, and awareness of the tradeoffs in monorepo vs. per-module repo structures.
- Strong, hands-on Azure networking and security: hub-spoke topology, NSGs, Azure Firewall, WAF rules, private endpoints, DNS, and hybrid/legacy connectivity patterns, plus identity (Entra ID, RBAC, managed identity) and governance (management groups, Azure Policy).
- Working knowledge of SOC 2 control families (access control, change management, logging/monitoring, network security) well enough to design a landing zone that satisfies them by default, even without prior formal audit experience.
- Able to work effectively with the firm's existing security, network, and IT teams
- Direct experience building CI/CD pipelines for infrastructure changes (GitHub Actions, Azure DevOps, or equivalent), including plan/apply gating patterns.
- Working knowledge of policy-as-code approaches (e.g. Sentinel, OPA) and IaC/security scanning practices.
- Comfortable being the first cloud engineer on the program: able to make and defend decisions yourself.
- Strong scripting ability (PowerShell, Bash, or Python) for tooling and automation glue.
- Comfortable defining a self-service application deployment pattern (a “golden path”) that other engineers can use to ship application code without needing deep Terraform expertise themselves.
Preferred Qualifications
- Direct experience with Terraform Cloud/Enterprise specifically (not just open-source Terraform CLI).
- Prior experience building a landing zone from zero, versus inheriting and extending one.
- Experience consuming (or ideally contributing to) Azure Verified Modules.
- Direct experience operating in a compliance-driven environment (SOC 2, HIPAA, or similar) through an actual audit cycle, where controls needed to be demonstrable, not just implemented.
- Experience mentoring other infrastructure/platform engineers.
- Experience with HashiCorp HCP Waypoint, or a similar internal developer platform (IDP) approach, for standardizing self-service application deployment.
- HashiCorp Terraform Associate or Professional certification.
- Microsoft certifications: AZ-305 (Solutions Architect) and/or AZ-400 (DevOps Engineer); AZ-500 (Security) is a plus.
You Matter - HCVT provides a variety of benefits and perks that help sustain a healthy and thriving work environment.
- Visit the Benefits section to learn more.
The ordinance requires employers to state, in all job solicitations, postings and advertisements, that the employer will consider applicants in a manner consistent with the requirements of the Fair Chance Initiative.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
See All 1,453+ Staff Engineer Jobs in Irvine
Find roles in Irvine that match your experience and apply in just a few clicks.
Find Staff Engineer JobsStaff Engineer Job Market in Irvine
Who's Hiring
- Rivian311
- Langan Engineering and Environmental Services156
- Terran Orbital104
- Marvell Technology104
- Rivian and Volkswagen Group Technologies104
Top Industries Hiring
- Technology & Software208
- Staffing & Recruiting52
- Electronics & Hardware52
- Consulting & Professional Services52
Staff Engineer Jobs in Irvine: Frequently Asked Questions
How do I get a staff engineer job in Irvine?
The strongest path into Irvine's staff engineer market runs through its semiconductor, enterprise software, and medical device sectors, which cluster in the Irvine Spectrum and around the UCI Research Park corridor. Candidates with experience on large-scale systems, embedded software, or hardware-software integration stand out here. Targeting mid-to-large technology and medtech companies directly, and engaging with the active Orange County engineering community, gives you a measurable edge over general applicants.
Which companies hire staff engineers in Irvine?
Companies currently hiring staff engineers in Irvine include Rivian, Langan Engineering and Environmental Services, and Terran Orbital, per current listings on Migrate Mate as of August 2026. Irvine's employer mix leans heavily toward established technology firms, semiconductor manufacturers, and medical device companies with significant local engineering headcount.
Are there remote staff engineer jobs in Irvine?
Yes, though availability depends heavily on the specialty: software-focused staff engineer roles are far more remote-friendly than hardware, embedded systems, or lab-adjacent positions. About 38% of staff engineer openings tied to Irvine are remote or hybrid as of August 2026, with fully remote work most common in cloud infrastructure and enterprise software roles rather than semiconductor or medtech positions.
How can I get a staff engineer job in Irvine with little or no experience?
The most realistic entry path in Irvine is through associate or senior engineer roles at the area's larger technology and medical device employers, many of whom post structured progression tracks internally. Gaining hands-on experience through UCI's research programs or internships at Irvine Spectrum-based firms builds local credibility quickly. Roles in QA engineering, systems integration, or junior platform engineering are the most common lateral moves that lead to staff-level positions in the Irvine market.
Which industries hire the most staff engineers in Irvine?
Most staff engineer openings in Irvine sit in Technology & Software, Staffing & Recruiting, and Electronics & Hardware, per current listings on Migrate Mate as of August 2026. Irvine's concentration of semiconductor firms, enterprise software companies, and medical device manufacturers around the Spectrum and UCI Research Park makes those sectors the consistent drivers of local staff engineer hiring.
Related Jobs in California
See All 1,453+ Staff Engineer Jobs in Irvine
Find roles in Irvine that match your experience and apply in just a few clicks.
Find Staff Engineer Jobs