Principal Software Engineer - Infrastructure Automation (Terraform)
Early Warning Services2 hours ago
Tokyo, JapanStaff+
Base Salary
$173k - $276k/yr
Responsibilities
- Set the enterprise technical strategy, reference architecture, standards, governance, and operating model for infrastructure automation.
- Own Terraform as the enterprise infrastructure-provisioning standard, including modules, private registries, testing, release management, state governance, policy gates, and adoption.
- Define and operate the enterprise Ansible platform, including collections, roles, execution environments, Molecule, linting, and Ansible Automation Platform/AWX practices.
- Architect policy-as-code and configuration-as-code systems for Terraform, Ansible, Kubernetes admission, network infrastructure, compliance, drift detection, and safe rollback.
- Design secure controls for identity, credentials, segregation of duties, protected state, change review, break-glass access, and automated evidence capture.
- Map automated infrastructure controls to PCI DSS, SOX ITGC, NYDFS Part 500, FFIEC, and other regulatory requirements and serve as a technical authority for audits.
- Build self-service capabilities such as module discovery, scaffolding, exception workflows, compliance dashboards, and platform APIs.
- Prototype complex solutions, mentor senior engineers, establish engineering standards, and drive adoption across organizational boundaries.
- Define and report platform effectiveness measures including adoption, policy pass rate, plan/apply success, control coverage, and drift remediation time.
Requirements
- Bachelor’s degree in computer science, engineering, or a related technical field, with typically ten or more years of related software, platform, cloud, or infrastructure engineering experience.
- Significant experience leading enterprise-scale technical architecture and operating platform capabilities used by multiple engineering organizations.
- Strong software engineering and distributed-systems design skills, including reasoning about interfaces, state, failure modes, idempotency, and blast radius.
- Strong production programming experience in Python or Go for tools, controllers, services, APIs, or custom scanners.
- Deep enterprise-scale Terraform expertise covering module composition, testing, private registries, state governance, versioning, and plan/apply controls.
- Deep Ansible experience covering collections, execution environments, Molecule testing, linting, and Ansible Automation Platform/AWX operations.
- Fluency with OPA/Rego or a comparable policy language and experience authoring, testing, versioning, and operating policy-as-code libraries.
- Deep AWS infrastructure and security knowledge, including IAM, federated identity, short-lived credentials, networking, encryption, and secure configuration.
- Working knowledge of Kubernetes sufficient to design and evaluate infrastructure, identity, and admission-control policies.
- Experience embedding security, regulatory, and change-management controls into automated infrastructure workflows in financial services or another regulated industry.
- Ability to work independently, resolve ambiguous cross-domain decisions, influence standards without direct authority, and drive organizational adoption.
- Exceptional communication skills for architecture decisions, engineering standards, executive communication, audit narratives, and regulatory documentation.
- Preferred qualifications include experience with HCP Terraform or Terraform Enterprise, internal developer platforms, network automation, dynamic secrets, OIDC workload identity, regulated industries, and relevant AWS, Terraform, Kubernetes, security, or related certifications.
- Preferred full-stack internal engineering experience includes React, Next.js, Angular, TypeScript, Python, or Go.
Benefits
- Hybrid work model for positions in Scottsdale, San Francisco, Chicago, or New York.
- Healthcare, dental, vision, HSA contributions, and flexible spending accounts.
- 401(k) plan with a 100% company Safe Harbor match on the first 6% deferred, immediately upon eligibility.
- Flexible time off for exempt employees or generous PTO for non-exempt employees, plus 11 paid company holidays and a paid volunteer day.
- Twelve weeks of paid parental leave and Maven family-planning support covering fertility, adoption, surrogacy, pregnancy, postpartum, and related care.
- Employment is subject to a background and drug screen.
Tech Stack
Categories