IAC Engineer

Australia-Employment; San Francisco (CA); On-site; USD 104,000 - 166,000; Full time

Benefits offered by this job

Competitive compensation

Full benefits (Medical, Vision, Dental

401k

Long term Contract-to-Hire

Job summary

Jobot’s client in San Francisco is seeking a mid-level IAC Engineer to own the design, implementation, and maintenance of IaC modules and CI/CD pipelines across AWS and GCP. You’ll build reusable libraries, enforce security guardrails, and embed policy-as-code throughout the lifecycle.

The role requires 3–5 years of cloud infrastructure experience, Terraform and GitOps familiarity, and willingness to travel to the SF office on a hybrid schedule.

Qualifications

• 3 to 5 years of experience building and managing cloud infrastructure using IaC tools (Terraform, Pulumi, CloudFormation, or similar).
• Strong working knowledge of at least one major cloud provider (AWS, GCP, or Azure) including networking, IAM, and compute services.
• Experience designing and operating CI/CD pipelines for infrastructure (GitHub Actions, GitLab CI, Jenkins, or similar).
• Proficiency in a scripting language such as Python, Bash, or Go for automation tasks.
• Understanding of networking fundamentals (VPCs, subnets, DNS, load balancing, firewalls).
• Familiarity with containerization and orchestration technologies (Docker, Kubernetes, ECS).
• Strong version control practices and experience with GitOps workflows.

Responsibilities

• Author, review, and maintain Terraform modules for provisioning customer cloud resources across AWS and GCP.
• Design reusable IaC patterns and module libraries that enforce organizational standards and security guardrails.
• Implement CI/CD pipelines for infrastructure changes including plan, validate, and apply workflows (GitHub Actions, GitLab CI, Atlantis).
• Manage infrastructure state, drift detection, and automated remediation strategies across customer environments.
• Collaborate with customer security and compliance teams to embed policy-as-code using tools such as OPA, Sentinel, or Checkov.
• Automate environment provisioning for development, staging, and production with clean GitOps flows and minimal manual intervention.
• Integrate secrets management (HashiCorp Vault, AWS Secrets Manager) and identity controls into the IaC lifecycle.
• Write and maintain documentation, runbooks, and architecture decision records (ADRs) for all IaC modules and pipeline assets.

Skills

Terraform

AWS

GCP

CI/CD

GitOps

Python

Networking

Docker

Kubernetes

Education

Bachelor's degree in CS or related

Tools

GitHub Actions

GitLab CI

Atlantis

Jenkins

Job description

IAC Engineer

$50 - $80 per hour | San Francisco, CA | On-site | Consulting

Software Security Firm looking for IAC Engineer

We are a Software Consulting firm working with enterprise and start companies that are AI driven and we are developing some of the most cutting edge software/security solutions platforms in the world

A bit about us:

We are a Software Consulting firm working with enterprise and start companies that are AI driven and we are developing some of the most cutting edge software/security solutions platforms in the world

Why join us?

• Competitive Compensation
• Work on incredible projects that are fun and challenging
• Full Benefits (Medical, Vision, Dental)
• 401k
• Long term Contract to Hire opportunity

Job Details

Mid-level Infrastructure as Code Engineer who will own the design, implementation, and maintenance of customer IaC modules, CI/CD pipelines for infrastructure, and policy-as-code guardrails. Working closely with customer platform engineering, DevOps, and security peers, you will build reusable module libraries that enforce organizational standards, automate environment provisioning across AWS and GCP, manage state and drift, and embed security policy into every plan and apply so customer infrastructure ships reproducible, auditable, and secure by default. This position is based in our SF office on a hybrid schedule; candidates outside the Bay Area who are willing to travel regularly are also encouraged to apply

RESPONSIBILITIES

• Author, review, and maintain Terraform modules for provisioning customer cloud resources across AWS and GCP.
• Design reusable IaC patterns and module libraries that enforce organizational standards and security guardrails.
• Implement CI/CD pipelines for infrastructure changes including plan, validate, and apply workflows (GitHub Actions, GitLab CI, Atlantis).
• Manage infrastructure state, drift detection, and automated remediation strategies across customer environments.
• Collaborate with customer security and compliance teams to embed policy-as-code using tools such as OPA, Sentinel, or Checkov.
• Automate environment provisioning for development, staging, and production with clean GitOps flows and minimal manual intervention.
• Integrate secrets management (HashiCorp Vault, AWS Secrets Manager) and identity controls into the IaC lifecycle.
• Write and maintain documentation, runbooks, and architecture decision records (ADRs) for all IaC modules and pipeline assets.

RESPONSIBILITIES

• Author, review, and maintain Terraform modules for provisioning customer cloud resources across AWS and GCP.
• Design reusable IaC patterns and module libraries that enforce organizational standards and security guardrails.
• Implement CI/CD pipelines for infrastructure changes including plan, validate, and apply workflows (GitHub Actions, GitLab CI, Atlantis).
• Manage infrastructure state, drift detection, and automated remediation strategies across customer environments.
• Collaborate with customer security and compliance teams to embed policy-as-code using tools such as OPA, Sentinel, or Checkov.
• Automate environment provisioning for development, staging, and production with clean GitOps flows and minimal manual intervention.
• Integrate secrets management (HashiCorp Vault, AWS Secrets Manager) and identity controls into the IaC lifecycle.
• Write and maintain documentation, runbooks, and architecture decision records (ADRs) for all IaC modules and pipeline assets.

QUALIFICATIONS

• 3 to 5 years of experience building and managing cloud infrastructure using IaC tools (Terraform, Pulumi, CloudFormation, or similar).
• Strong working knowledge of at least one major cloud provider (AWS, GCP, or Azure) including networking, IAM, and compute services.
• Experience designing and operating CI/CD pipelines for infrastructure (GitHub Actions, GitLab CI, Jenkins, or similar).
• Proficiency in a scripting language such as Python, Bash, or Go for automation tasks.
• Understanding of networking fundamentals (VPCs, subnets, DNS, load balancing, firewalls).
• Familiarity with containerization and orchestration technologies (Docker, Kubernetes, ECS).
• Strong version control practices and experience with GitOps workflows.
• Must be located in the SF Bay Area or willing to travel to our San Francisco office on a regular cadence.

NICE TO HAVE

• HashiCorp Terraform Associate or equivalent cloud certification (AWS SAA, GCP ACE).
• Experience with configuration management tools (Ansible, Chef, or Puppet).
• Familiarity with service mesh and observability platforms (Istio, Datadog, Prometheus).
• Contributions to internal platform or developer experience initiatives.

Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.