About This Role
This engineering role focuses on designing, building, and maintaining the infrastructure-as-code foundations that power cloud and hybrid environments. The Infrastructure Automation Engineer will create reusable Terraform modules, harden pipelines, enforce policy-as-code, and standardize infrastructure delivery across multiple teams and cloud providers. The ideal candidate brings strong software engineering discipline to infrastructure work and has shipped production-grade Terraform at scale.
Responsibilities
- Design, develop, and maintain modular, composable Terraform code that codifies the entire infrastructure estate across cloud accounts and environments
- Build a library of well-tested, reusable Terraform modules with clear interfaces, semantic versioning, and comprehensive documentation
- Implement Terraform automation pipelines using GitHub Actions, GitLab CI, Atlantis, Terraform Cloud, or Spacelift, with plan/apply gating, drift detection, and policy enforcement
- Define and enforce policy-as-code using Sentinel, Open Policy Agent (OPA), Conftest, or Checkov to prevent insecure or non-compliant infrastructure changes
- Manage Terraform state at scale with appropriate backend strategies, state locking, workspace organization, and disaster recovery patterns
- Drive multi-account, multi-region, and multi-cloud infrastructure provisioning strategies with clear isolation, naming, and tagging standards
- Implement infrastructure testing including unit tests with terraform-compliance, integration tests with Terratest, and policy tests across pull requests
- Collaborate with security, networking, and platform teams to embed guardrails directly into reusable modules and pipelines
- Standardize patterns for secrets management, identity federation, and least-privilege IAM through reusable Terraform abstractions
- Lead migrations from legacy, ClickOps, or non-IaC infrastructure into managed Terraform footprints with minimal disruption
- Drive cost optimization, tagging hygiene, and lifecycle management across the Terraform-managed estate
- Mentor engineering teams on Terraform best practices, anti-patterns, and pull-request review standards
- Maintain comprehensive runbooks, architecture diagrams, and onboarding materials for the infrastructure platform
- Stay current with Terraform, OpenTofu, and broader IaC ecosystem developments and recommend adoption where beneficial
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related field
- Five or more years of experience in cloud infrastructure or DevOps engineering, with significant Terraform focus
- Deep, hands-on expertise authoring and maintaining production Terraform across at least one major cloud provider
- Strong experience designing reusable Terraform modules with clean APIs and version discipline