Role Overview
Client is seeking a hands-on Infrastructure Automation Engineer to operate, design, and modernize its environment through infrastructure as code, automation, and practical use of approved AI tools. The engineer will assess the current environment, recommend improvements, and own projects from discovery and design through implementation, documentation, and operational handoff.
The environment is primarily hosted in AWS, with Azure and Microsoft identity services supporting key business and product capabilities. Initial priorities include modernizing Active Directory and hybrid identity, advancing Azure Virtual Desktop readiness, and expanding the use of Terraform and GitHub Actions. The workload is approximately 60% infrastructure operations and engineering projects and 40% automation and team development, with the balance evolving as priorities change.
The best fit is an Infrastructure or Systems Engineer who has moved into cloud automation and IaC while staying hands-on with Windows infrastructure and identity. The DevOps team owns application deployment pipelines. Candidates from DevOps backgrounds should also demonstrate substantial hands-on experience with Windows Server, Active Directory, hybrid identity, and Terraform.
Responsibilities
Infrastructure engineering and operations
- Assess existing infrastructure, identify risks and gaps, and recommend improvements to architecture, security, reliability, and operational efficiency.
- Design, implement, and support solutions primarily in AWS, with additional responsibility for Azure and hybrid identity services. Explain tradeoffs involving cost, complexity, supportability, and business impact.
- Administer and troubleshoot Windows Server, Active Directory, DNS, Group Policy, and Microsoft Entra ID integrations. Contribute to domain controller modernization and virtual desktop initiatives.
- Improve monitoring, capacity management, recovery readiness, and service documentation. Plan and execute infrastructure changes using established review, validation, and recovery procedures.
- Lead investigations into complex production incidents across cloud, identity, networking, and applications. Coordinate corrective actions, communicate during disruptions, and contribute to incident reviews.
- Participate in the on-call rotation and provide after-hours coverage when required.
Automation and infrastructure as code
- Identify manual processes that can be automated and develop an automation roadmap with infrastructure leadership.
- Build and maintain Terraform and Terragrunt configurations using established DevOps standards. Create reusable modules, scripts, and deployment patterns the team can maintain.
- Bring existing infrastructure under IaC through controlled discovery, import, validation, and deployment.
- Build and improve GitHub Actions workflows for infrastructure validation and deployment. Use branches, pull requests, code reviews, and automated checks to manage changes.
- Write and maintain automation using PowerShell, Python, and service APIs. Incorporate access controls, secrets management, testing, and deployment approvals.
- Use approved AI tools to accelerate engineering work, with human review and validation before deployment.
Technical guidance and collaboration
- Guide teammates through troubleshooting, design decisions, working sessions, and code reviews. Help the team adopt Git, GitHub, Terraform, and automation through shared delivery.
- Document designs, procedures, and handoffs so the infrastructure team can support automated services independently.
- Partner with Infrastructure, DevOps, Security, IAM, Support, and Product teams to align designs with service needs and organizational standards.
- Translate technical findings into recommendations and implementation plans. Keep leadership informed of progress, risks, and decisions needed.
Required Qualifications
- 5+ years of infrastructure or systems engineering experience, including independently assessing environments, designing solutions, and driving implementation.
- Hands-on AWS experience with EC2, VPC networking, IAM, and S3.
- Experience building and maintaining Terraform configurations and working with Terragrunt.
- Hands-on Git/GitHub experience with branches, pull requests, and code reviews, plus experience creating or maintaining GitHub Actions workflows.
- Ability to write, troubleshoot, and maintain PowerShell and/or Python automation and use APIs for administrative tasks and service integrations.
- Strong Windows Server, Active Directory, DNS, and Group Policy experience, with working knowledge of Microsoft Entra ID and hybrid identity integration.
- Understanding of infrastructure security, monitoring, backup and recovery, and production change management. Ability to troubleshoot across identity, networking, cloud infrastructure, and applications.
- Strong communication, ownership, follow-through, and collaboration in a remote team. Ability to mentor colleagues and explain recommendations to technical and business audiences.
- Availability for on-call coverage and required after-hours work.
Preferred Qualifications
- Infrastructure modernization and experience helping a team adopt automation and IaC.
- Active Directory modernization, domain controller upgrades, or hybrid identity migrations.
- Azure Virtual Desktop or AWS WorkSpaces.
- Cisco Meraki, LAN/WAN, VPN, and cloud networking.
- Citrix or NetScaler.
- Commvault or comparable enterprise data protection tools.
- Resilient service design and disaster recovery validation.
- Experience using AI tools for engineering work and evaluating their output.
- Technical leadership or mentoring within a cross-functional service or product team.
