Terraform Admin

Top Skills Required
• AWS Certified DevOps Engineer - Professional or relevant AWS certification.
• Microsoft Azure DevOps Engineer Expert or related Azure certification.
• Experience administering or engineering enterprise OpenShift/Kubernetes environments.
Job Description/ Responsibilities :
We are seeking an experienced Cloud DevSecOps Engineer to design, develop, automate, and operate secure, scalable cloud CI/CD platforms and deployment pipelines.
The successful candidate will play a key role in advancing the organization's cloud and DevSecOps strategy by building pipeline-as-code and infrastructure-as-code solutions, integrating security and quality controls into the software delivery lifecycle, and enabling highly automated deployment of applications and infrastructure across cloud and container platforms.
The role requires strong hands-on experience with AWS or Azure, Azure DevOps/Jenkins, Terraform, Ansible, Packer, Git, Kubernetes/OpenShift/AKS, Python, YAML, security tooling, and modern deployment strategies such as Blue/Green and Canary.
We are seeking an experienced Cloud DevSecOps Engineer to design, develop, automate, and operate secure, scalable cloud CI/CD platforms and deployment pipelines.
The successful candidate will play a key role in advancing the organization's cloud and DevSecOps strategy by building pipeline-as-code and infrastructure-as-code solutions, integrating security and quality controls into the software delivery lifecycle, and enabling highly automated deployment of applications and infrastructure across cloud and container platforms.
The role requires strong hands-on experience with AWS or Azure, Azure DevOps/Jenkins, Terraform, Ansible, Packer, Git, Kubernetes/OpenShift/AKS, Python, YAML, security tooling, and modern deployment strategies such as Blue/Green and Canary.

Key Responsibilities
1. CI/CD Engineering & Automation
• Design, develop, and maintain highly scalable CI/CD pipelines supporting application, infrastructure, and cloud platform deployments.
• Develop pipelines as code using YAML, Jenkins, Azure DevOps, or equivalent CI/CD technologies.
• Automate the complete software delivery lifecycle, including:
o Source-code integration
o Build and packaging
o Unit and automated testing
o Code-quality validation
o Security scanning
o Infrastructure provisioning
o Application deployment
o Release validation
o Production promotion
• Design pipelines capable of supporting high deployment volumes with rapid feedback and reliable rollback mechanisms.
• Implement reusable pipeline templates and automation frameworks to standardize application delivery across engineering teams.
2. Infrastructure as Code & Configuration Management
• Design and implement cloud infrastructure using Terraform.
• Develop and maintain Ansible Playbooks for configuration management and operational automation.
• Develop and maintain Packer templates for standardized and immutable machine images.
• Promote immutable infrastructure patterns instead of traditional server patching and configuration drift.
• Implement version-controlled Infrastructure as Code with appropriate validation, testing, approvals, and deployment controls.
• Automate repetitive infrastructure and operational activities to reduce manual intervention and human error.
3. Cloud & Container Platform Engineering
• Build and deploy cloud-native applications and supporting infrastructure within AWS and/or Microsoft Azure.
• Support containerized application deployment using:
o Red Hat OpenShift
o Azure Kubernetes Service (AKS)
o Kubernetes
o Docker/container technologies
• Work with cloud services including:
o Virtual machines
o Containers
o Serverless platforms
o Managed databases
o Networking
o IAM/security services
o Storage
o Application services
• Partner with architecture and engineering teams to implement scalable, resilient, secure, and highly available cloud architectures.
4. DevSecOps & Shift-Left Security
• Embed security controls throughout CI/CD pipelines following DevSecOps and Shift-Left principles.
• Integrate automated security capabilities such as:
o SAST
o DAST
o Software Composition Analysis
o Container-image scanning
o Infrastructure-as-Code scanning
o Secrets detection
o Vulnerability scanning
• Integrate enterprise secrets-management platforms such as HashiCorp Vault into application and infrastructure deployment processes.
• Ensure credentials, API keys, certificates, tokens, and other sensitive information are securely managed and are not embedded within source code or pipelines.
• Work closely with Information Security teams to incorporate enterprise security requirements into automated delivery workflows.
5. Deployment Strategy & Reliability Engineering
• Implement modern deployment strategies including:
o Blue/Green deployments
o Canary releases
o Rolling deployments
o Automated rollback
• Implement pipeline quality gates and release-candidate validation mechanisms.
• Integrate real-time monitoring and deployment metrics to assess application and pipeline health.
• Develop automation that detects deployment failures and provides fast feedback to development teams.
• Apply Chaos Engineering concepts where appropriate to identify weaknesses in applications and cloud infrastructure.
6. Observability & Production Support
• Monitor CI/CD platform availability, performance, capacity, and reliability.
• Respond to alerts, incidents, pipeline failures, and platform performance issues.
• Develop dashboards, logs, metrics, and automated diagnostics that support effective Root Cause Analysis (RCA).
• Troubleshoot issues across:
o CI/CD platforms
o Cloud infrastructure
o Kubernetes/OpenShift
o Networking
o Application deployment
o Security integrations
• Build automation and self-service tooling that reduces operational errors and improves developer experience.
7. Engineering Collaboration
• Partner with Enterprise Architecture, Information Security, Software Engineering, QA, Cloud Engineering, and Operations teams to enable secure cloud adoption.
• Translate business and application requirements into technical DevSecOps solutions.
• Mentor developers and engineers on CI/CD, Infrastructure as Code, cloud engineering, security automation, and DevSecOps practices.
• Evaluate emerging cloud and DevSecOps technologies and recommend improvements to engineering standards and platforms.
Required Qualifications
• 8+ years of combined experience in Information Technology, Cloud Engineering, DevOps, Infrastructure Engineering, Software Engineering, or Information Security.
• 4+ years of hands-on DevOps/DevSecOps experience preferred.
• Strong hands-on experience with either AWS or Microsoft Azure.
• Strong experience designing and developing enterprise CI/CD pipelines.
• Hands-on experience with:
o Terraform
o Ansible
o Packer
o Git
o YAML
o Jenkins and/or Azure DevOps
• Strong experience with Infrastructure as Code (IaC).
• Experience with Kubernetes, OpenShift, or Azure Kubernetes Service (AKS).
• Proficiency in Python for automation and engineering tooling.
• Strong understanding of cloud networking, compute, storage, security, containers, serverless technology, and managed services.
• Experience integrating automated testing and security tooling into CI/CD pipelines.
• Understanding of Shift-Left Security and DevSecOps principles.
• Experience implementing or supporting Blue/Green and Canary deployment strategies.
• Familiarity with secrets-management solutions such as HashiCorp Vault.
• Strong troubleshooting and problem-solving capabilities.
Preferred Qualifications
• AWS Certified DevOps Engineer - Professional or relevant AWS certification.
• Microsoft Azure DevOps Engineer Expert or related Azure certification.
• Experience administering or engineering enterprise OpenShift/Kubernetes environments.
• Experience with container-security and vulnerability-management tools.
• Experience implementing Chaos Engineering practices.
• Experience with ServiceNow for Incident, Change, and Problem Management.
• Experience implementing automated security and compliance gates in CI/CD workflows.
• Understanding of Site Reliability Engineering (SRE) concepts, including observability, reliability, automated remediation, and operational metrics.