Infrastructure Automation Engineer (Terraform-heavy)

Infrastructure Automation Engineer (Terraform-heavy)

• Design, develop, and maintain modular, composable Terraform code that codifies the entire infrastructure estate across cloud accounts and environments.
• Build a library of well-tested, reusable Terraform modules with clear interfaces, semantic versioning, and comprehensive documentation.
• Implement Terraform automation pipelines using GitHub Actions, GitLab CI, Atlantis, Terraform Cloud, or Spacelift, with plan/apply gating, drift detection, and policy enforcement.
• Define and enforce policy-as-code using Sentinel, Open Policy Agent (OPA), Conftest, or Checkov to prevent insecure or non-compliant infrastructure changes.
• Manage Terraform state at scale with appropriate backend strategies, state locking, workspace organization, and disaster recovery patterns.
• Drive multi-account, multi-region, and multi-cloud infrastructure provisioning strategies with clear isolation, naming, and tagging standards.
• Implement infrastructure testing including unit tests with terraform-compliance, integration tests with Terratest, and policy tests across pull requests.
• Collaborate with security, networking, and platform teams to embed guardrails directly into reusable modules and pipelines.
• Standardize patterns for secrets management, identity federation, and least-privilege IAM through reusable Terraform abstractions.
• Lead migrations from legacy, ClickOps, or non-IaC infrastructure into managed Terraform footprints with minimal disruption.
• Drive cost optimization, tagging hygiene, and lifecycle management across the Terraform-managed estate.
• Mentor engineering teams on Terraform best practices, anti-patterns, and pull-request review standards.
• Maintain comprehensive runbooks, architecture diagrams, and onboarding materials for the infrastructure platform.
• Stay current with Terraform, OpenTofu, and broader IaC ecosystem developments and recommend adoption where beneficial.

• Bachelor’s degree in Computer Science, Engineering, or a related field.
• Five or more years of experience in cloud infrastructure or DevOps engineering, with significant Terraform focus.
• Deep, hands-on expertise authoring and maintaining production Terraform across at least one major cloud provider.
• Strong experience designing reusable Terraform modules with clean APIs and version discipline.
• Hands-on experience with Terraform state management, backends, and large-scale workspace organization.
• Strong scripting skills in Python, Go, or Bash.
• Experience with CI/CD pipelines for infrastructure code and automated policy enforcement.
• Solid understanding of cloud networking, identity, and security primitives.
• Strong Git-based workflows including code review, branching, and release management.
• Excellent troubleshooting and root-cause analysis skills.

• Experience with multi-cloud Terraform (AWS + Azure or AWS + GCP).
• Familiarity with Terragrunt, Atlantis, Spacelift, or env0.
• Experience with policy-as-code engines (Sentinel, OPA, Checkov).
• Contributions to public Terraform modules or providers.
• Exposure to FinOps practices and tagging-driven cost governance.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.

Powered by JazzHR