DevOps Engineer IAC Terraform

Job description

<p><p><b>Description : </b><br/><br/><b>About the Client : </b><br/><br/>The organization is a mission-driven technology company focused on creating safer communities through innovative school bus safety solutions across North America.

By leveraging AI-powered cameras and cloud-connected systems, it helps school districts monitor and enforce traffic laws around school buses, protecting students as they travel to and from school.

The company partners closely with local governments, law enforcement, and transportation agencies to deliver end-to-end programs that include installation, monitoring, violation processing, and public education all at no cost to taxpayers.<br/><br/><b>About the role : </b><br/><br/>The client is hiring a <b>DevOps Engineer</b> to build and secure cloud platforms with Infrastructure-as-Code (Terraform & AWS CDK), GitOps, and multi?account AWS.

Youll modernize legacy monoliths and accelerate microservices delivery while embedding security-by-default and reliability into everything we ship.<br/><br/><b>Key Responsibilities : </b><br/><br/>- IaC at scale : Design, build, and maintain reusable Terraform modules and CDK constructs for landing zones, VPC/networking, compute, databases, and security controls across multiple accounts/ environments.<br/><br/>- GitOps enablement : Implement and operate Github Actions for app and platform workloads; declarative config, drift detection, and progressive delivery (canary/blue?green).<br/><br/>- Cloud security & compliance : Enforce least?privilege IAM, KMS encryption, Secrets Manager/ Parameter Store, GuardDuty/Security Hub, CloudTrail/Lake; contribute to SOC 2/ISO27001/CIS hardening and policy?as?code.<br/><br/>- Multi-account architecture : Evolve AWS Organizations/Control Tower/SCPs, cross?account roles, and shared services (observability, CI/CD, artifact registries, networking) with clear blast?radius boundaries.<br/><br/>- Modernization : Partner with teams to decompose monoliths via the strangler?fig pattern, carve?outs, and data migration strategies; define microservice standards (contracts, observability, release patterns).<br/><br/>- CI/CD & reliability : Own build/test/release pipelines (GitHub Actions) quality gates, artifact/version promotion, rollbacks;<br/><br/>- Observability & ops : Standardize metrics/logs/traces with CloudWatch/Datadog codify dashboards, alerts, and runbooks.

Drive cost visibility and guardrails.<br/><br/>- Developer experience : Ship self's ervice templates, Backstage scaffolds/golden paths, and documentation that make the paved road the easiest road.<br/><br/><b>Preferred Qualifications :</b><br/><br/></p><p>- 5+ years in DevOps/Platform/SRE roles operating production systems.<br/><br/>- Advanced Terraform and/or AWS CDK (TypeScript/Python); authored reusable modules/constructs and remote state strategies.<br/><br/>- AWS depth : VPC design (subnets, routing, NAT, TGW), ALB/NLB, ECS/EKS/Lambda, RDS/Aurora, S3, CloudFront, Route 53, IAM, KMS; experience with Control Tower/Organizations/SCPs.<br/><br/>- Containers & GitOps : Docker image build/hardening, Kubernetes and/or ECS operations.<br/><br/>- Security?first mindset : Secrets management, encryption, vulnerability scanning, image signing/SBOMs, Policy-as?Code;<br/><br/>- CI/CD & testing : Pipelines with unit/integration/e2e gates, environment promotion, and rollback strategies.<br/><br/>- Operations : On?call participation, incident management, and post?incident improvement.<br/><br/><b>Nice to Haves : </b><br/><br/>- Backstage or internal developer platform (IDP) experience; golden?path templates.<br/><br/>- Network security (WAF, Zero?Trust), data security (PII tokenization/DLP), or compliance program experience.<br/><br/>- Additional policy?as?code tools : AWS Config conformance packs, CloudFormation Guard, tfsec/Checkov, Snyk.<br/><br/>- Cost management : CUR/Cost Explorer, anomaly detection, unit economics/chargeback, Savings Plans/RI strategy.<br/><br/>- Certifications : AWS DevOps/Solutions Architect, HashiCorp Terraform Associate, Kubernetes CKA/CKAD.<br/><br/><b>Why Join Us?</b><br/><br/>- Impact at scale : Shape a modern, secure platform powering dozens of services across multi?account AWS.<br/><br/>- Automation first : Green?light to eliminate toil with codegolden paths, GitOps, and paved?road tooling.<br/><br/>- Security by default : Partner closely with Security/GRC to build compliant systems without slowing delivery.<br/><br/>- Growth : Hands?on with modernization (monolith ?

microservices), platform design, and SRE maturity.<br/><br/>- Team culture : Pragmatic, low?ego engineers who value clarity, ownership, and reliability.</p><br/></p> (ref:hirist.tech)

Required Skill Profession

Computer Occupations