Staff DevOps Engineer, IaC

Accountabilities:: Own and continuously improve CD and release pipelines, including artifact promotion, environment progression, progressive delivery, automated health checks, deployment gates, rollback, scheduling, feature-flagged releases, and coordinated multi-service deployments. Serve as the technical authority for Terraform architecture, including reusable modules, remote state, backends and locking, workspace and organization strategies, provider management, versioning, RBAC, secrets management, and scalable access patterns. Define cloud-agnostic infrastructure architecture and reusable module libraries that support AWS today while enabling future Azure and GCP environments. Establish infrastructure governance and guardrails through policy-as-code and automated security, compliance, and cost controls using technologies such as Sentinel, OPA, Checkov, and Infracost. Drive organization-wide adoption of Terraform by migrating existing infrastructure, developing golden-path templates and documentation, and enabling engineering teams to safely manage their own IaC. Design, develop, and deploy secure and compliant AWS infrastructure through Terraform while shaping patterns that can extend across multiple cloud providers. Monitor deployment pipelines, Terraform activity, infrastructure health, alerts, and metrics, serving as a technical escalation point for production incidents and after-hours support when required. Own incident response, rollback, remediation, and technical decisions related to deployment and infrastructure issues. Partner with engineering, QA, security, IT, and other technical teams to improve release processes, infrastructure standards, reliability, and operational efficiency. Mentor engineers on release engineering, deployment safety, Terraform best practices, infrastructure design, and IaC code quality. Requirements: 10+ years of cloud DevOps experience, primarily focused on AWS, with significant expertise in release engineering, deployment automation, and Infrastructure as Code. Proven production experience across multiple cloud platforms, including AWS plus hands-on experience with Azure and/or GCP. 4+ years of production-grade Terraform experience, including module development, remote state management, workspaces, provider versioning, and safe plan/apply workflows through CI/CD. Deep expertise in continuous delivery rather than CI alone, including progressive deployment strategies, automated rollback, release orchestration, and infrastructure provisioning. Enterprise-scale Terraform architecture experience covering state management, module registries, versioning, governance policies, and multi-team access control. Demonstrated experience designing and operating cloud-agnostic IaC architectures in production. Familiarity with Terraform ecosystem tools such as Terragrunt, Terraform Cloud/Enterprise, Atlantis, Sentinel, OPA, and Checkov is beneficial. Proven ability to drive organization-wide IaC adoption through migrations, standardized templates, documentation, and engineering enablement. Strong CI/CD expertise, with hands-on CircleCI experience strongly preferred, particularly on the release and deployment side of the pipeline. Expertise in cloud operations, including scalability, reliability, maintainability, and the full deployment lifecycle. Demonstrated success improving engineering delivery metrics such as lead time, change failure rate, and time to recovery. 7+ years of experience working with Unix-like operating systems, including Linux, macOS, BSD, or AIX. 5+ years of scripting experience with Shell, Go, Python, Perl, Tcl/Tk, or similar technologies for deployment tooling and infrastructure automation. 5+ years of monitoring, alerting, and observability experience, including infrastructure drift detection against Terraform state. Kubernetes or ECS experience, including Helm, Kustomize, and cluster or node provisioning through Terraform, is highly desirable. Strong communication and mentoring skills, with the ability to influence engineers and technical stakeholders across the organization. Experience with Jira, Confluence, Git, and Bitbucket is expected. Benefits: Base salary of $180,000–$240,000 per year for roles based in California, Colorado, Maryland, New Jersey, Washington, and New York. Comprehensive medical, dental, and vision insurance. 401(k) plan and life insurance coverage. Unlimited paid time off. Flexible hybrid-remote working environment. Opportunities for professional growth, advancement, and increased technical ownership. Remote work available from home for eligible employees residing in approved U.S. states. Physical office options in Austin, Texas, and Tampa, Florida for employees who prefer a hybrid arrangement. No visa sponsorship is available for this position. Applicants residing within the city limits of Chicago are not eligible for this role unless they relocate outside the city proper.