Principal Software Engineer, Infrastructure Automation

What you'll do

• Define and execute the enterprise technical strategy and reference architecture for infrastructure-as-code platforms.
• Own the Terraform ecosystem, including module taxonomy, private registry strategy, and adoption standards for cloud and on-premises environments.
• Develop opinionated Terraform modules for AWS services that provide secure, compliant, and observable defaults.
• Architect and manage the enterprise Ansible platform, including collections, execution environments, and automation practices.
• Design and maintain the enterprise policy-as-code architecture and Rego policy library for Terraform, Ansible, and Kubernetes.
• Eliminate static credentials by implementing OIDC-federated, short-lived IAM roles and dynamic secrets for all infrastructure workflows.
• Map infrastructure automation controls to regulatory requirements like PCI DSS and SOX to provide continuous automated evidence.
• Architect self-service capabilities for module discovery, compliance dashboards, and automated exception workflows.

What we're looking for

• Must independently possess the eligibility to work in the United States for any employer.
• Bachelor's degree in computer science, engineering, or a related technical field is typically required.
• Typically ten or more years of related experience in software, platform, cloud, or infrastructure engineering.
• Strong production programming experience in Python or Go building tools, controllers, services, APIs, or custom scanners.
• Deep Terraform expertise at enterprise scale, including module composition, testing, private registries, state governance, and plan/apply controls.
• Deep experience with Ansible including collections, execution environments, Molecule testing, linting, and Ansible Automation Platform/AWX operations.
• Fluency with OPA/Rego or a comparable policy language for authoring, testing, and operating policy-as-code libraries.
• Deep knowledge of AWS infrastructure and security, including IAM, federated identity, networking, and encryption.