IAC Devops Engineer

Job Summary


Responsibilities

• Design, write, and maintain Terraform modules and Terragrunt configuration that can be orchestrated across multiple AWS accounts.
• Build and operate Development, Stage, and Production from that code.
• Own the shared platform: API Gateway, CloudFront, WAF, DNS, certificates, IAM, KMS, VPC and endpoints, Lambda, container services, Step Functions, queues, storage, event rules, and the generative-AI and search services in use.
• Keep infrastructure in code. Return any console change to the repository, and keep remote state out of source control.
• Review a Terraform plan before every apply, including what will change, where, and how it will be rolled back.
• Build the pipelines that validate, scan, test, and deploy. A failed check blocks the merge.
• Apply least-privilege IAM and remove unused roles, broad grants, and placeholder policies.
• Keep infrastructure and container security scans in the pipeline, with an enforced quality gate.
• Support application teams on runtime wiring: function and task configuration, environment variables, secrets, and the image produced by the pipeline.
• Maintain the environments after release, including alarms, retention, certificate renewal, and drift.
• Version Control & Branching Strategy: Experience managing Terraform code in Git using trunk-based development or feature branch workflows, ensuring all infrastructure changes are tracked and peer-reviewed.
• GitHub Actions & CI/CD Integration: Hands-on experience building and maintaining GitHub Actions workflows that automatically run terraform fmt, terraform validate, security scans, and terraform plan on every Pull Request.
• Pull Request Plan Reviews: Automatically posting terraform plan output as a comment on GitHub Pull Requests to facilitate asynchronous code and infrastructure reviews before merging.
• Branch Protection & Quality Gates: Enforcing strict branch protection rules in GitHub where passing automated checks (linting, security, and clean plan) and requiring at least one peer review are mandatory pre-requisites to merge into main.
• Module Versioning & Releases: Utilizing Git tagging and semantic versioning for shared Terraform modules stored in private registries or repositories to ensure reproducible and controlled module consumption across environments.

Required qualifications

• HashiCorp Certified: Terraform Associate (003) certification.
• Hands-on Terraform for production AWS, including modules, remote state per environment, and plan-before-apply.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.