Staff Software Engineer - Infrastructure Automation (Terraform)
Early Warning Services2 hours ago
Tokyo, JapanStaff+
Base Salary
$124k - $198k/yr
Responsibilities
- Design, build, and improve infrastructure-as-code capabilities using Terraform, Ansible, policy-as-code, and configuration-as-code.
- Develop reusable, versioned, tested Terraform modules for AWS services and common infrastructure patterns with security, compliance, observability, encryption, logging, tagging, networking, and IAM controls.
- Lead engineering and operating practices for HCP Terraform or Terraform Enterprise, including workspaces, run tasks, policy sets, state governance, drift detection, and plan/apply controls.
- Develop shared Ansible collections, roles, execution environments, automated testing, Molecule workflows, linting, and engineering standards.
- Implement automated validation and policy controls using Terraform testing, Terratest, tflint, static analysis, OPA/Rego or comparable technologies, and Kubernetes admission controls.
- Build secure authentication, short-lived IAM roles, OIDC federation, dynamic secrets, segregation-of-duties controls, protected state, change review, and break-glass processes.
- Automate network configuration generation, validation, rollback, compliance checks, post-change verification, and drift detection.
- Map infrastructure automation controls to PCI DSS, SOX ITGC, NYDFS Part 500, and FFIEC requirements and automate evidence collection.
- Develop technical documentation, architecture decision records, self-service tooling, APIs, compliance visibility, and developer enablement capabilities.
- Mentor engineers, improve design and code-review practices, define platform effectiveness measures, and influence implementation decisions across engineering teams.
Requirements
- Bachelor's degree in computer science, engineering, or a related technical field, or education and experience typically obtained through the stated qualifications.
- Typically eight or more years of related experience in software engineering, cloud engineering, platform engineering, infrastructure engineering, DevOps, or a related discipline.
- Strong software engineering and systems design skills, including reasoning about interfaces, state, failure modes, idempotency, and change impact.
- Strong production programming experience in Python, Go, or a comparable general-purpose language used for infrastructure tooling, services, controllers, or automation.
- Hands-on experience developing and operating software, infrastructure tooling, or platform capabilities used by other engineers, including testing, code review, versioning, and operational ownership.
- Strong Terraform experience covering reusable modules, composition, automated testing, registry publishing, versioning, state management, and infrastructure change workflows.
- Experience with Ansible beyond basic playbooks, including reusable roles or collections, execution environments, automated testing, linting, or Ansible Automation Platform/AWX.
- Experience implementing policy-as-code or infrastructure policy controls using OPA/Rego or comparable technologies.
- Strong knowledge of AWS infrastructure and security concepts, including IAM, networking, encryption, credential management, and secure configuration.
- Working knowledge of Kubernetes and containerized infrastructure for infrastructure and admission-control requirements.
- Experience implementing security, compliance, or change-management controls through infrastructure automation in a regulated or similarly controlled environment.
- Ability to lead complex technical work, collaborate across engineering disciplines, and influence decisions without direct authority.
- Strong written and verbal communication skills for technical documentation, architecture records, implementation standards, and control documentation.
- Background and drug screen.
- Preferred experience with HCP Terraform or Terraform Enterprise, internal developer platforms, infrastructure self-service tooling, developer portals, network automation, federated identity, dynamic secrets, regulatory control frameworks, or regulated financial services.
- Preferred experience building internal engineering tools with React, Next.js, Angular, TypeScript, Python, or Go, and current AWS, Terraform, Kubernetes, or other relevant certification.
Benefits
- Hybrid work model for positions in Scottsdale, San Francisco, Chicago, or New York.
- Medical PPO/HDHP, dental, and vision coverage, with HSA contributions and flexible spending accounts.
- 401(k) plan with a 100% company Safe Harbor Match on the first 6% of deferral immediately upon eligibility.
- Flexible Time Off for exempt employees, generous PTO for non-exempt employees, 11 paid company holidays, and a paid volunteer day.
- 12 weeks of paid parental leave.
- Maven Family Planning support covering fertility, adoption, surrogacy, pregnancy, postpartum, pediatrics, and return-to-work services.
- Discretionary incentive plan and additional company benefits.
Tech Stack
Categories