Infrastructure Automation Engineer

Bright Vision Technologies; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking an Infrastructure Automation Engineer to design, build, and maintain infrastructure-as-code foundations using Terraform across cloud and on-prem environments.

You will create reusable Terraform modules, enforce policy-as-code, and drive multi-account, multi-region provisioning while collaborating with security and platform teams.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related field.
• Five or more years of experience in cloud infrastructure or DevOps engineering, with significant Terraform focus.
• Deep, hands-on expertise authoring and maintaining production Terraform across at least one major cloud provider.
• Strong experience designing reusable Terraform modules with clean APIs and version discipline.
• Hands-on experience with Terraform state management, backends, and large-scale workspace organization.
• Strong scripting skills in Python, Go, or Bash.
• Experience with CI/CD pipelines for infrastructure code and automated policy enforcement.
• Solid understanding of cloud networking, identity, and security primitives.
• Strong Git-based workflows including code review, branching, and release management.
• Excellent troubleshooting and root-cause analysis skills.

Responsibilities

• Design, develop, and maintain modular, composable Terraform code across cloud accounts and environments.
• Build a library of well-tested, reusable Terraform modules with clear interfaces and documentation.
• Implement Terraform automation pipelines using GitHub Actions, GitLab CI, Atlantis, Terraform Cloud, or Spacelift with plan/apply gating and policy enforcement.
• Define and enforce policy-as-code to prevent insecure infrastructure changes.
• Manage Terraform state at scale with backends, state locking, and disaster recovery patterns.
• Drive multi-account, multi-region, and multi-cloud provisioning strategies with clear naming and tagging standards.
• Implement infrastructure testing including unit, integration, and policy tests.
• Collaborate with security, networking, and platform teams to embed guardrails in modules and pipelines.
• Standardize secrets management, identity federation, and least-privilege IAM through Terraform abstractions.
• Lead migrations from legacy or non-IaC infrastructure into Terraform footprints.
• Drive cost optimization and tagging hygiene across the estate.
• Mentor teams on Terraform best practices and PR review standards.
• Maintain runbooks and onboarding materials for the infrastructure platform.
• Stay current with Terraform and IaC ecosystem developments and recommend adoption.

Skills

Terraform

Python

Go

Bash

CI/CD pipelines

GitHub Actions

Terragrunt

Atlantis

Spacelift

Env0

Education

Bachelor’s degree in Computer Science, Engineering, or a related field

Tools

Terraform

Terragrunt

Atlantis

Spacelift

env0

GitHub Actions

Job description

Bright Vision Technologies is a forward-thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations. We leverage cutting-edge technologies to create scalable, secure, and user-friendly applications.

As we continue to grow, we’re looking for a skilled Infrastructure Automation Engineer to join our dynamic team and contribute to our mission of transforming business processes through technology.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: Infrastructure Automation Engineer

Location: 100% Remote (Continental United States)

Position Type: In-house Bright Vision Technologies SOW engagement (no third-party client or vendor)

Experience: 5+ years

Salary - 100K – 150K

Sponsorship: No new H1B sponsorship available. H1B transfers welcomed for qualified candidates.

Employment Type: Full-time, direct W2 with Bright Vision Technologies (no C2C, no 1099, no third-party)

Engagement: Long-term, multi-year, aligned to the Bright Vision SOW delivery roadmap

Compensation: Competitive base salary commensurate with experience, plus benefits.

Employment Terms & Visa Policy

This is a 100% remote, full-time, direct W2 position with Bright Vision Technologies.

This role is part of Bright Vision Technologies’ in-house Statement of Work (SOW) engagement. The client, end customer, and employer for this position is Bright Vision Technologies — there is no third-party client, vendor, or implementation partner involved.

We do not engage in C2C, 1099, or third-party arrangements for this role.

BUT STRICTLY NO C2C/1099/3RD PARTY COMPANIES. ALL OUR ROLES ARE W2 AND NO 3RD PARTY BROKERING PLEASE.

Candidates must be willing to work directly as a full-time W2 employee of Bright Vision Technologies and contribute to our in-house SOW deliverables.

No new H1B sponsorship is available for this role.

However, candidates who are currently on a valid H1B visa and require a transfer are welcome to apply. We will support H1B transfers for qualified candidates.

For every role, a technical coding assessment is mandatory. Please apply only if you are confident in your technical abilities and hands-on experience.

Job Summary

We are seeking an Infrastructure Automation Engineer with deep Terraform expertise to design, build, and maintain the infrastructure-as-code foundations that power our cloud and hybrid environments. This role focuses on creating reusable Terraform modules, hardening pipelines, enforcing policy-as-code, and standardizing infrastructure delivery across multiple teams and cloud providers. The ideal candidate brings strong software engineering discipline to infrastructure work, has shipped production-grade Terraform at scale, and understands the operational realities of managing thousands of resources across many environments and accounts.

Key Responsibilities

• Design, develop, and maintain modular, composable Terraform code that codifies the entire infrastructure estate across cloud accounts and environments.
• Build a library of well-tested, reusable Terraform modules with clear interfaces, semantic versioning, and comprehensive documentation.
• Implement Terraform automation pipelines using GitHub Actions, GitLab CI, Atlantis, Terraform Cloud, or Spacelift, with plan/apply gating, drift detection, and policy enforcement.
• Define and enforce policy-as-code using Sentinel, Open Policy Agent (OPA), Conftest, or Checkov to prevent insecure or non-compliant infrastructure changes.
• Manage Terraform state at scale with appropriate backend strategies, state locking, workspace organization, and disaster recovery patterns.
• Drive multi-account, multi-region, and multi-cloud infrastructure provisioning strategies with clear isolation, naming, and tagging standards.
• Implement infrastructure testing including unit tests with terraform-compliance, integration tests with Terratest, and policy tests across pull requests.
• Collaborate with security, networking, and platform teams to embed guardrails directly into reusable modules and pipelines.
• Standardize patterns for secrets management, identity federation, and least-privilege IAM through reusable Terraform abstractions.
• Lead migrations from legacy, ClickOps, or non-IaC infrastructure into managed Terraform footprints with minimal disruption.
• Drive cost optimization, tagging hygiene, and lifecycle management across the Terraform-managed estate.
• Mentor engineering teams on Terraform best practices, anti-patterns, and pull-request review standards.
• Maintain comprehensive runbooks, architecture diagrams, and onboarding materials for the infrastructure platform.
• Stay current with Terraform, OpenTofu, and broader IaC ecosystem developments and recommend adoption where beneficial.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related field.
• Five or more years of experience in cloud infrastructure or DevOps engineering, with significant Terraform focus.
• Deep, hands-on expertise authoring and maintaining production Terraform across at least one major cloud provider.
• Strong experience designing reusable Terraform modules with clean APIs and version discipline.
• Hands-on experience with Terraform state management, backends, and large-scale workspace organization.
• Strong scripting skills in Python, Go, or Bash.
• Experience with CI/CD pipelines for infrastructure code and automated policy enforcement.
• Solid understanding of cloud networking, identity, and security primitives.
• Strong Git-based workflows including code review, branching, and release management.
• Excellent troubleshooting and root-cause analysis skills.

Preferred Qualifications

• Experience with multi-cloud Terraform (AWS + Azure or AWS + GCP).
• Familiarity with Terragrunt, Atlantis, Spacelift, or env0.
• Experience with policy-as-code engines (Sentinel, OPA, Checkov).
• Contributions to public Terraform modules or providers.
• Exposure to FinOps practices and tagging-driven cost governance.

We recognize that our people are our strength, and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs.

Bright Vision Technologies is an Equal Opportunity Employer, including Disability/Veterans.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.