Principal Software Engineer, Infrastructure Automation

What you'll do

• Architect and lead the strategy for the enterprise infrastructure-as-code platform using Terraform and Ansible.
• Establish engineering standards for infrastructure modules, including versioning, testing, and automated regression coverage.
• Develop opinionated Terraform modules to provide secure, compliant defaults for cloud and on-premises environments.
• Design and maintain a policy-as-code library using Rego to enforce security and compliance guardrails.
• Automate regulatory and operational controls to meet PCI DSS, SOX, and other financial industry requirements.
• Eliminate static credentials by implementing OIDC-federated, short-lived IAM roles and dynamic secrets.
• Serve as the technical authority for infrastructure-as-code during internal and external audits.
• Build self-service tools and APIs for module discovery, compliance dashboards, and automated exception workflows.

What we're looking for

• Must possess eligibility to work in the United States for any employer at the date of hire.
• Bachelor's degree in computer science, engineering, or a related technical field.
• Ten or more years of experience in software, platform, cloud, or infrastructure engineering with leadership in enterprise-scale architecture.
• Proficiency in Python or Go for building tools, controllers, services, APIs, and custom scanners.
• Deep expertise in Terraform at enterprise scale, including module composition, testing, and state governance.
• Deep experience with Ansible beyond playbooks, including collections, execution environments, and Automation Platform/AWX operations.
• Fluency with OPA/Rego or a comparable policy language for infrastructure and Kubernetes admission controls.
• Experience in financial services or other highly regulated industries (preferred); advanced AWS, Terraform, or Kubernetes certifications (preferred).