Information Technology Infrastructure Engineer - Cloud Platform

Colorado Public Employees' Retirement Association; Denver (CO); Hybrid; USD 108.000 - 130.000; Vollzeit

Benefits dieser Stelle

Hybrid work option

Zusammenfassung

Colorado Public Employees' Retirement Association seeks an experienced Infrastructure Engineer – Cloud Platform to design, build, and operate secure cloud platforms on AWS, integrated with PERA’s on-premises environment. You will implement IaC, automate provisioning, and ensure compliant, resilient platforms, leveraging Terraform, ECS, EKS, and GitOps practices.

The role requires hands-on experience with cloud networking, security, platform CI/CD, and collaboration across security, networking,

Qualifikationen

• Degree in technical (STEM) field and four years’ experience in technical role preferred or equivalent combination of education and experience
• AWS Practitioner/Associate and GitHub Enterprise certifications preferred
• Experience as an SME within multiple key technologies/platforms within the assigned technology domain with a solid understanding of system security implications
• Experience managing cloud landing zones on AWS, including multi-account structure, organizational guardrails, baseline configuration, and tagging standards (AWS Organizations and Control Tower)
• Experience with Infrastructure as Code at scale, including Terraform (plus CloudFormation as needed), reusable modules, remote state, testing, versioning, and drift detection
• Strong cloud networking, including VPC design, routing, DNS, load balancing, firewalls, VPC endpoints, and hybrid connectivity to on-premises (VPN, Direct Connect)
• Experience with container and Kubernetes platforms, including managed containers (ECS) and Kubernetes (EKS), cluster lifecycle and upgrades, ingress, Helm and GitOps deployment
• Knowledge of cloud security and compliance, including policy as code (service control policies, OPA or Kyverno), encryption, and vulnerability management
• Experience with platform CI/CD and GitOps, including shared pipeline templates, self-hosted runners and agents, artifact and image registries, and standard deployment strategies
• Experience with self-service and developer enablement, including golden paths, service catalog, templates, and an internal developer portal
• Experience with platform monitoring integration (standard logging, metrics, and alerting) and cloud cost governance (tagging, budgets, quotas, and show back)
• Hybrid infrastructure fluency, including on-premises integration alongside AWS and Kubernetes
• Experience with scripting and automation such as Python, PowerShell, and Bash, and cloud APIs and SDKs, to automate provisioning and operations
• Disciplined change management and clear documentation and communication, including standards, patterns, and onboarding guides that others can follow without help

Aufgaben

• Build, implement, and operate AWS landing zones, networking, identity, and guardrails to a documented standard
• Enforce security, compliance, and tagging standards through automated policy as code, and produce audit evidence on request
• Maintain and publish a catalog of versioned Infrastructure as Code modules, pipeline templates, and reference architectures
• Enable self-service provisioning so teams can deploy approved infrastructure in minutes or hours, not weeks, without opening manual requests
• Run patching, version upgrades, deprecation of retiring services, and capacity and quota planning on a predictable schedule
• Integrate the platform with enterprise tooling, including ServiceNow for requests, changes, and incidents, and with security and logging tools
• Provide Tier-2/3 support for cloud and platform issues, meeting agreed platform service objectives
• Define and test backup, disaster recovery, and failover against agreed recovery time and recovery point objectives
• Evaluate new cloud services and platform tooling, and provide adoption recommendations, documented standards, and migration guidance
• Support migration and modernization of on-premises workloads, including hybrid connectivity
• Govern cloud spend through tagging, budgets, and quotas, and provide show back reporting that gives teams visibility into their cloud costs
• Collaborate with security, networking, application, and database teams, including partners who run on-premises systems, and gather feedback from development and infrastructure teams to help prioritize work intake
• Write standards, patterns, and onboarding guides, and teach and coach teams on cloud, IaC, and platform use
• Perform other duties as assigned

Kenntnisse

AWS cloud

Terraform

Kubernetes

CI/CD automation

Security compliance

Infrastructure as Code

Networking

Scripting

Ausbildung

B.S. in STEM field

Tools

Terraform

AWS ECS

AWS EKS

GitHub Actions

ServiceNow

Jobbeschreibung

Job Details: Level: Experienced, Job Location: Penn Center - Denver, CO, Position Type: Full Time, Salary Range: $108000.00 - $130000.00Salary, Job Shift: Day, Summary of Job Responsibilities

This position is part of a team responsible for providing PERA’s development and infrastructure teams with secure, standardized, and self-service cloud platforms on AWS, connected to PERA’s on-premises environment. Participate with building the foundation, automate provisioning and compliance with Infrastructure as Code, and keep the platform current, supported, and resilient. Uses strong knowledge of AWS cloud networking, access management, containers (ECS) and Kubernetes (EKS), CI/CD and GitOps, and Infrastructure as Code tooling such as Terraform. You are hands-on in building reusable modules, templates, and automation, and in creating appropriate documentation, standards, and procedures while following essential security requirements.

Essential Duties and Responsibilities

Employees are held accountable for all duties of the job. Individuals must be able to perform these duties with or without reasonable accommodations.

• Build, implement, and operate AWS landing zones, networking, identity, and guardrails to a documented standard
• Enforce security, compliance, and tagging standards through automated policy as code, and produce audit evidence on request
• Maintain and publish a catalog of versioned Infrastructure as Code modules, pipeline templates, and reference architectures
• Enable self-service provisioning so teams can deploy approved infrastructure in minutes or hours, not weeks, without opening manual requests
• Run patching, version upgrades, deprecation of retiring services, and capacity and quota planning on a predictable schedule
• Integrate the platform with enterprise tooling, including ServiceNow for requests, changes, and incidents, and with security and logging tools
• Provide Tier-2/3 support for cloud and platform issues, meeting agreed platform service objectives
• Define and test backup, disaster recovery, and failover against agreed recovery time and recovery point objectives
• Evaluate new cloud services and platform tooling, and provide adoption recommendations, documented standards, and migration guidance
• Support migration and modernization of on-premises workloads, including hybrid connectivity
• Govern cloud spend through tagging, budgets, and quotas, and provide show back reporting that gives teams visibility into their cloud costs
• Collaborate with security, networking, application, and database teams, including partners who run on-premises systems, and gather feedback from development and infrastructure teams to help prioritize work intake
• Write standards, patterns, and onboarding guides, and teach and coach teams on cloud, IaC, and platform use
• Perform other duties as assigned

Job Qualifications

• Degree in technical (STEM) field and four years’ experience in technical role preferred or equivalent combination of education and experience
• AWS Practitioner/Associate and GitHub Enterprise certifications preferred
• Experience as an SME within multiple key technologies/platforms within the assigned technology domain with a solid understanding of system security implications
• Experience managing cloud landing zones on AWS, including multi-account structure, organizational guardrails, baseline configuration, and tagging standards (AWS Organizations and Control Tower)
• Experience with Infrastructure as Code at scale, including Terraform (plus CloudFormation as needed), reusable modules, remote state, testing, versioning, and drift detection
• Strong cloud networking, including VPC design, routing, DNS, load balancing, firewalls, VPC endpoints, and hybrid connectivity to on-premises (VPN, Direct Connect)
• Experience with container and Kubernetes platforms, including managed containers (ECS) and Kubernetes (EKS), cluster lifecycle and upgrades, ingress, Helm and GitOps deployment
• Knowledge of cloud security and compliance, including policy as code (service control policies, OPA or Kyverno), encryption, and vulnerability management
• Experience with platform CI/CD and GitOps, including shared pipeline templates, self-hosted runners and agents, artifact and image registries, and standard deployment strategies
• Experience with self-service and developer enablement, including golden paths, service catalog, templates, and an internal developer portal
• Experience with platform monitoring integration (standard logging, metrics, and alerting) and cloud cost governance (tagging, budgets, quotas, and show back)
• Hybrid infrastructure fluency, including on-premises integration alongside AWS and Kubernetes
• Experience with scripting and automation such as Python, PowerShell, and Bash, and cloud APIs and SDKs, to automate provisioning and operations
• Disciplined change management and clear documentation and communication, including standards, patterns, and onboarding guides that others can follow without help

Working Conditions

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Standard office environment with frequent telephone communication, computer operation, and other office productivity machinery, such as a copy and printer machine.
• Occasional moving and positioning supplies in excess of 20 pounds
• All employees are expected to present themselves in a professional manner in alignment with the financial services industry
• Ability to sit for prolonged periods of time
• Ability to operate standard PC equipment
• Ability to manage frequent deadlines and tight schedules

Hybrid Work Option

Opportunity to work from home up to three days per week. Eligibility dependent upon factors detailed in PERA's Work from Home Policy.

Job Description Disclaimer

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of an employee. Duties, responsibilities, and activities may change or be assigned with or without notice.

Unfortunately, at this time, PERA cannot consider candidates that require sponsorship (now or in the future), or are located outside of the US.

All Colorado PERA employees are subject to PERA’s Ethics Policy and some employees are subject to the Personal Trading Policy. These policies include restrictions on outside business activities and employment and have certain requirements on personal trading. You may request copies of these policies from PERA’s talent acquisition team and any questions can be answered by PERA’s Investment Administration team.

Why Work at PERA

Colorado PERA offers more than a traditional pension career. We are a mission-driven organization with a growing focus on technology and modernization. Employees have the opportunity to do meaningful work with a real impact on over 700,000 members. From enhancing digital tools and member experiences to supporting major enterprise initiatives, employees are part of meaningful, future-focused work that blends public service with innovation. We take pride in our inclusive culture, career development opportunities, and our consistent recognition as a Top Workplace based on employee feedback. PERA is a place to connect, contribute, and be part of something bigger.

A Culture That Cares

At PERA, leveraging employee strengths and supporting strong engagement are the foundations of our culture. Employees are encouraged to grow through development opportunities and internal career movement, while also being part of an organization where people feel respected, informed, and included. Collaboration is encouraged across teams, allowing employees to learn from one another and contribute in ways that maximize their unique skills. We strive to foster an environment where employees can do their best work and feel supported by the people around them.

An Employer that Invests in You

PERA invests in our employees in ways that matter; from comprehensive benefits and generous paid time-off to thoughtful everyday amenities that enhance the office experience. Employees are encouraged to continue learning through training, mentoring, and development at every stage of their careers. We champion a workplace where people feel valued, inspired, and equipped to grow.

Join Us

If you’re energized by meaningful work, motivated by an organization that evolves with a changing world and looking for an employer that invests in you, then consider joining PERA’s team. Learn more about careers at PERA at copera.org/careers.

Position Title: Infrastructure Engineer – Cloud Platform

Division: Information Technology

Reports to: Infrastructure Manager

Job Status: Full-time, Exempt

Salary: $108,000.00 to $130,000.00 Annual, commensurate with experience

Posting Dates: 11/13/2026 to 11/29/2026