Job Title: Site Reliability Engineer Lead Job ID: 26-02197 Location: Grand Rapids, MI Duration: Through end of the 2026
TECHNICAL SKILLS
Must Have
- AWS Cloud Expertise
- GitHub & CI/CD
- Operational & Collaboration Skills
- Rundeck (Operational Automation)
- Security & Compliance
- Spacelift (Terraform Orchestration)
- Terraform experience in production AWS environments.
Nice To Have
- Experience migrating teams into centralized IaC or platform tooling.
- FinOps experience (cost tagging, chargeback/showback)
- Policy-as-code exposure (OPA, Sentinel, or equivalent)
- Terraform tooling: tflint, checkov, tfsec, infracost
Job Summary:
We are seeking an experienced Infrastructure as Code (IaC) Engineer (Contract) to support a centralized cloud enablement team responsible for building, deploying, and operating standardized AWS infrastructure using Terraform, Spacelift, Rundeck, and GitHub.
This role focuses on creating and maintaining reusable IaC patterns, build and deployment automation, and governance controls that enable secure, scalable selfservice infrastructure across a multiaccount AWS environment. The contractor will work closely with platform, security, and application teams to deliver reliable "paved road solutions while maintaining strong compliance and operational rigor.
Essential Functions:
- Design, build, and maintain Terraform modules and IaC patterns used by multiple delivery teams.
- Implement and operate Terraform deployments via Spacelift, including stack design, approvals, drift detection, and environment promotion.
- Develop and maintain Rundeck jobs for AWS operational automation, breakglass actions, and platform support workflows.
- Build and support GitHubbased CI/CD pipelines using GitOps principles (PRdriven change control).
- Establish and enforce AWS standards for:
- Account structure and environments
- Tagging, cost allocation, and ownership
- Security, access control, and auditability
- Implement secure automation using IAM roles, OIDC, and leastprivilege access.
- Collaborate with application and platform teams to onboard workloads to standardized IaC tooling.
- Produce and maintain documentation, runbooks, and onboarding guides.
- Troubleshoot IaC, pipeline, and automation failures; participate in root cause analysis as needed.
Qualifications:
Infrastructure as Code (Terraform)
- 5+ years of handson Terraform experience in production AWS environments.
- Advanced experience with:
- Module design, reuse, and versioning
- Remote state using S3 and DynamoDB
- Multiaccount and multienvironment deployments
- Standards enforcement via validation and lifecycle rules
- Experience supporting centralized Terraform modules consumed by many teams.
AWS Cloud Expertise
- Strong, practical experience with:
- AWS Organizations, SCPs, and multiaccount strategies
- Crossaccount IAM role design
- Account bootstrap / landing zone concepts
- Handson experience provisioning AWS services via Terraform, including:
- IAM
- VPC and networking
- EC2 / Auto Scaling
- EKS or ECS (working knowledge)
- S3, RDS
- CloudWatch and logging
- KMS and encryption
Spacelift (Terraform Orchestration)
- Production experience using Spacelift for Terraform:
- Stack and dependency design
- Environment promotion and approvals
- Worker configuration (private or AWShosted preferred)
- Drift detection and scheduled runs
- Experience integrating Spacelift with AWS IAM and GitHub workflows.
Rundeck (Operational Automation)
- Experience designing and operating Rundeck jobs for AWS infrastructure operations.
- Strong understanding of:
- Job security, RBAC, and approvals
- Credential management using IAM roles (no static keys)
- Error handling, retries, and notifications
- Familiarity with jobascode or versioncontrolled job patterns.
GitHub & CI/CD
- Enterprise GitHub experience, including:
- Branch protection rules and CODEOWNERS
- Required reviews and PRbased change control
- GitHub Actions for CI/CD
- OIDCbased authentication to AWS
- Strong understanding of GitOps delivery models.
Security & Compliance
- Experience implementing:
- Leastprivilege IAM and permission boundaries
- Secure secrets handling (no credentials in code)
- Approval workflows and separation of duties
- Ability to embed security and compliance into IaC pipelines rather than manual processes.
- Experience in regulated or risksensitive environments strongly preferred.
Operational & Collaboration Skills
- Strong troubleshooting and operational mindset.
- Experience supporting shared platforms used by many teams.
- Ability to document solutions clearly and enable team adoption.
- Strong communication skills and comfort working with crossfunctional stakeholders.
Never miss an opportunity! Create an alert based on the job you applied for.
