IAC Engineer - Terraform, CI/CD, Cloud Security

Jobot; San Francisco (CA); On-site; USD 104,000 - 166,000; Full time

Benefits offered by this job

Competitive compensation

Full benefits (Medical, Vision, Dental

401k

Long term Contract-to-Hire

Job summary

Jobot’s client in San Francisco is seeking a mid-level IAC Engineer to own the design, implementation, and maintenance of IaC modules and CI/CD pipelines across AWS and GCP. You’ll build reusable libraries, enforce security guardrails, and embed policy-as-code throughout the lifecycle.

The role requires 3–5 years of cloud infrastructure experience, Terraform and GitOps familiarity, and willingness to travel to the SF office on a hybrid schedule.

Qualifications

• 3 to 5 years of experience building and managing cloud infrastructure using IaC tools (Terraform, Pulumi, CloudFormation, or similar).
• Strong working knowledge of at least one major cloud provider (AWS, GCP, or Azure) including networking, IAM, and compute services.
• Experience designing and operating CI/CD pipelines for infrastructure (GitHub Actions, GitLab CI, Jenkins, or similar).
• Proficiency in a scripting language such as Python, Bash, or Go for automation tasks.
• Understanding of networking fundamentals (VPCs, subnets, DNS, load balancing, firewalls).
• Familiarity with containerization and orchestration technologies (Docker, Kubernetes, ECS).
• Strong version control practices and experience with GitOps workflows.

Responsibilities

• Author, review, and maintain Terraform modules for provisioning customer cloud resources across AWS and GCP.
• Design reusable IaC patterns and module libraries that enforce organizational standards and security guardrails.
• Implement CI/CD pipelines for infrastructure changes including plan, validate, and apply workflows (GitHub Actions, GitLab CI, Atlantis).
• Manage infrastructure state, drift detection, and automated remediation strategies across customer environments.
• Collaborate with customer security and compliance teams to embed policy-as-code using tools such as OPA, Sentinel, or Checkov.
• Automate environment provisioning for development, staging, and production with clean GitOps flows and minimal manual intervention.
• Integrate secrets management (HashiCorp Vault, AWS Secrets Manager) and identity controls into the IaC lifecycle.
• Write and maintain documentation, runbooks, and architecture decision records (ADRs) for all IaC modules and pipeline assets.

Skills

Terraform

AWS

GCP

CI/CD

GitOps

Python

Networking

Docker

Kubernetes

Education

Bachelor's degree in CS or related

Tools

GitHub Actions

GitLab CI

Atlantis

Jenkins

Job description

Jobot’s client in San Francisco is seeking a mid-level IAC Engineer to own the design, implementation, and maintenance of IaC modules and CI/CD pipelines across AWS and GCP. You’ll build reusable libraries, enforce security guardrails, and embed policy-as-code throughout the lifecycle.

The role requires 3–5 years of cloud infrastructure experience, Terraform and GitOps familiarity, and willingness to travel to the SF office on a hybrid schedule.