DevOps & Infrastructure as Code
Reproducible, auditable and fast deployments
Former Microsoft MVP for Azure Infrastructure as Code and Terraform Associate, I industrialize the Azure delivery chain end to end: IaC modules, pipelines, tests, security and promotion across environments.
Who is it for?
Platform and DevOps teams still deploying by hand or with fragile scripts, standardizing Terraform/Bicep across the company, or migrating from Azure DevOps to GitHub.
What I deliver
- Reusable Terraform or Bicep modules (internal registry, versioning, tests, documentation)
- GitHub Actions / Azure DevOps pipelines: plan/apply with approvals, secret-less OIDC, protected environments
- Pipeline security: IaC scanning (Checkov, tfsec), policies as code, signing and provenance
- State, environment and promotion management from dev to staging to production
- Migration from scripts or ARM templates to Terraform/Bicep, import of existing resources
- Standards, code reviews and IaC training for your teams
Method in 4 steps
- 1
Inventory
Mapping of manual deployments, automation debt and friction points; state of pipelines and environments; operational risks.
Deliverable: Map of the current state and automation roadmap
- 2
Foundations
Repository structure, versioned Terraform or Bicep modules, naming conventions, reference pipelines using OIDC (no secrets), Checkov, tfSec and Terraform-docs checks.
Deliverable: Reference repositories and pipelines
- 3
Industrialization
Gradual migration of workloads to the pipelines, automated tests and controls, cost estimated with Infracost, consistent environments from dev to production.
Deliverable: Reproducible, auditable deployments
- 4
Autonomy
Golden paths, documentation, pair work with the team, which then evolves the modules itself.
Deliverable: Golden paths and an autonomous team
Proof points
From 3 days to 4 hours
deployment lead time on an enterprise program after industrialization
Former Azure IaC MVP
Microsoft recognition for Infrastructure as Code contributions
Multi-environment
consistent, auditable deployments from dev to production
Cost, timeline and deliverables of a typical engagement
Three formats, from the shortest to the most complete. Durations are orders of magnitude observed on my engagements; the exact scope and quote are set after the first 30-minute call, within 48 hours.
5 to 10 days
Inventory and convergence plan
Review of repositories, pipelines and manual deployments, non-coded infrastructure debt, target tooling (Terraform or Bicep, GitHub Actions or Azure DevOps) and a batched migration plan.
3 to 6 weeks
DevOps foundations
Reusable modules, repository structure, pipelines with federated identity (no secrets), reproducible environments, code review and infrastructure tests, documented conventions.
2 to 4 months
Industrialisation and autonomy
Priority workloads migrated to infrastructure as code, auditable deployments across environments, trained teams shipping their own changes without me.
Fixed price for the inventory and the foundations, capped time-and-materials for industrialisation. The daily rate and conditions (remote, on site, duration) are stated in the proposal. No licence resale and no managed services: you own the code and the tenant.
- Knowledge transfer included at every step (pair reviews, workshops, documentation)
- Code and pipelines delivered in your repository, under your licence
- Weekly progress review with decision makers
Frequently asked questions
GitHub Actions or Azure DevOps?
Both work very well with Azure. GitHub often wins on ecosystem (Copilot, built-in security, marketplace); Azure DevOps stays relevant if your boards and artifacts already live there. I help you decide and migrate if needed.
Can you take over an existing Terraform codebase?
Yes: codebase assessment (structure, state, modules, security), progressive refactoring plan and version upgrades without a big bang.
Do you do IaC beyond Azure?
Azure is my core expertise. The practices (modules, tests, pipelines, policies) also apply to the GitHub, Entra ID and Kubernetes resources I routinely manage with Terraform.
Discuss this with me
A first 30-minute call is free and without commitment.
Other services
Related articles
Hands-on Azure, AKS, FinOps and agentic AI write-ups published on blog.smartcloudarchitect.fr.
All articles on the blog· 9 min read
FinOps de l'IA agentique : mesurer jetons, coûts et outils par personne, équipe et modèle· 12 min read
Des MCP d'entreprise pour les agents : Azure MCP Server, Microsoft Learn et une couche tickets avec approbation humaine· 12 min read
« Agent Ready » : onboarder une équipe sur une plateforme agentique, sans ticket et avec des droits bornés· 11 min read
Garde-fous IA portables : NeMo Guardrails derrière agentgateway, en fail-closed