Senior Infrastructure Automation Engineer

Early Warning; San Francisco (CA); Hybrid; USD 149,000 - 198,000; Full time

Benefits offered by this job

Healthcare Coverage

401(k) Retirement Plan

Paid Time Off and Holidays

12 weeks Paid Parental Leave

Maven Family Planning

Job summary

Early Warning is hiring a Staff Software Engineer - Infrastructure Automation in San Francisco to design, build, and improve infrastructure-as-code tooling for cloud and on-prem environments. You will own Terraform modules, Ansible capabilities, and policy controls, ensuring secure, observable, and auditable infrastructure across teams.

The role demands senior hands-on engineering, collaboration with Security, Risk, and Compliance, and leadership in architectural decision-making.

Qualifications

• Bachelor's degree in computer science, engineering, or a related technical field.
• Typically eight or more years of related experience in software engineering, cloud engineering, platform engineering, infrastructure engineering, DevOps, or a related technical discipline.
• Strong software engineering and systems design skills with the ability to turn ambiguous problems into maintainable solutions.
• Ability to execute complex technical work with general direction and make implementation decisions within established architecture.
• Strong customer-first approach balancing internal customer and developer needs with security, reliability, and control requirements.
• Excellent written and verbal communication skills, including technical documentation and architecture decisions.
• Background check and drug screen.
• Experience with AWS infrastructure and security concepts, and containerized infrastructure (Kubernetes).
• Experience implementing policy-as-code or infrastructure policy controls (OPA/Rego).

Responsibilities

• Apply software engineering discipline to infrastructure automation with modular, versioned tooling and automated regression coverage.
• Execute complex infrastructure automation tasks with general direction and manage risks and dependencies.
• Contribute to reference architectures for infrastructure-as-code and evaluate design tradeoffs.
• Drive adoption of Terraform for cloud and on-premises provisioning; contribute to module taxonomy and private registry standards.
• Design and develop Terraform modules for AWS services with security, observability, encryption, and IAM controls by default.
• Develop override patterns addressing legitimate use cases while ensuring policy controls are auditable.
• Author, test, and maintain Terraform and Ansible modules with automated validation and policy evaluation.
• Lead practices for Terraform Enterprise including workspaces, state governance, drift detection, and plan/apply controls.
• Develop and improve shared Ansible capabilities, including roles, execution environments, and testing (Molecule).
• Create configuration-as-code for network infrastructure with change control, rollback, pre-change validation, and drift detection.
• Write, version, and maintain policy-as-code evaluating Terraform plans, Ansible configurations, and Kubernetes admission controls.
• Implement secure authentication patterns and dynamic secrets for credentials; align with PCI DSS, SOX ITGC, NYDFS, FFIEC as applicable.
• Collaborate with Security, Risk, and Compliance to map controls and automate evidence collection.
• Develop engineering standards, self-service tooling, APIs, and compliance visibility for the infrastructure platform.
• Mentor engineers and promote design, implementation, testing, and code-review practices across teams.
• Partner with CI/CD and observability teams to integrate infrastructure modules into shared workflows.
• Define and monitor platform effectiveness measures like module adoption and drift remediation.

Skills

Python

Go

Terraform

Ansible

AWS

Kubernetes

Policy-as-code

OIDC/IAM security

CI/CD

Security/compliance

Education

Bachelor's degree in computer science, engineering, or related field

Tools

Terraform

Ansible

Terratest

tflint

OPA/Rego

Job description

Early Warning is hiring a Staff Software Engineer - Infrastructure Automation in San Francisco to design, build, and improve infrastructure-as-code tooling for cloud and on-prem environments. You will own Terraform modules, Ansible capabilities, and policy controls, ensuring secure, observable, and auditable infrastructure across teams.

The role demands senior hands-on engineering, collaboration with Security, Risk, and Compliance, and leadership in architectural decision-making.