IT SYSTEMS ENGINEER SR

Job-ID: 1241Category: SupportLocation: Maryville, TN, United States; Dallas, TX, United States; Charlotte, NC, United States; Raleigh, NC, United States; Birmingham, AL, United States; Memphis, TN, United StatesSchedule: Full timePosted: 2026-09-14Platform Infrastructure Engineer – Infrastructure-as-CodeDescription:As a Platform Infrastructure Engineer, you will be a crucial part of First Horizon's Infrastructure-as-Code team, building and operating the foundational infrastructure that powers the organization's developer and cloud experience. Your primary focus will be designing, implementing, and managing Infrastructure-as-Code to deliver self-service, declarative cloud resource provisioning through Kubernetes-native APIs. Leveraging senior-level Kubernetes expertise, you will define reusable infrastructure patterns, author declarative resource definitions, and build composable templates that enable development teams to provision and manage cloud resources consistently, securely, and at scale. You will collaborate closely with Architects and engineering teams to evolve the platform from manual and imperative workflows toward a fully GitOps-driven, policy-governed infrastructure model — ensuring reliability, repeatability, and compliance across all environments.Responsibilities:Leverage Engineering background and skills as an Infrastructure-as-Code Platform EngineerDesign, develop, and maintain declarative infrastructure patterns using Crossplane and Helm to enable self-service cloud resource provisioning.Build, test, and version reusable IaC components (Compositions, Helm charts, Configuration Packages) within a common infrastructure framework.Understands Semantic versioning and release management as applied to infrastructure artifacts and chart repositories.Complete understanding of Software Development Lifecycle as it applies to infrastructure codeExperience with breaking down infrastructure components into modular, composable, and version-controlled resources.Extensive understanding of Git branching methodologies and their impact on infrastructure code promotion across environments.Infrastructure-as-Code with Crossplane & HelmDesign and maintain Crossplane Compositions, CompositeResourceDefinitions (XRDs), and Claims to provision and manage cloud resources as Kubernetes-native APIs.Build and publish reusable Crossplane Configuration Packages for self-service infrastructure consumption by development teams.Configure and manage Crossplane Providers, handling credentials securely through Kubernetes Secrets or external secret stores.Develop, version, and maintain production-grade Helm charts for internal services, platform components, and third-party tooling.Manage Helm chart repositories (OCI registries) and implement chart testing pipelines using helm lint, helm unittest, and kubeconform.Build Helm templating patterns that support multi-environment, multi-cluster deployments with values overlays and library charts.Implement GitOps workflows (ArgoCD or Flux) for continuous deployment of both Helm releases and Crossplane claims.Migrate legacy IaC (e.g., Terraform/HCL) toward Crossplane-managed Kubernetes-native resource models where appropriate.CI/CD & DevOps Platform FluencyMaintain a strong working understanding of CI/CD platforms and DevOps toolchains to ensure IaC components integrate seamlessly into existing build, test, and deployment pipelines.Collaborate with DevOps teams to embed infrastructure validation, policy checks, and drift detection into pipeline stages.Troubleshoot issues end-to-end across the infrastructure delivery chain (source, build, package, deploy, and runtime) in coordination with DevOps engineering.Support and evolve the IaC platform by:Supporting the full infrastructure lifecycle ensuring highly scalable and reliable service.Unit and integration testing of new and proposed infrastructure changes.Identifying deficiencies and applying solutions to infrastructure patterns through IaC principles and framework.Utilizing monitoring and observability to both troubleshoot infrastructure drift and provide feedback into the infrastructure development lifecycle.Understanding and promoting infrastructure and application Security best practices.Participating in on-call to support the IaC platform and underlying infrastructure.Authoring support documentation, runbooks, and user guides for internal teams consuming IaC resources.Work closely with Architects and Leads to understand infrastructure requirements and align with product and technology vision.Continuously explore and stay current on new and emerging IaC technologies, Kubernetes ecosystem tooling, and cloud provider capabilities.Required Knowledge and Experience:Minimum 10 years of experience as a DevOps or Systems Engineer or a bachelor's degree and 6 years of experience.Kubernetes (Senior-Level Expertise) -Deep understanding of cluster architecture: control plane, etcd, kubelet, kube-proxy, and API server internalsHelm and KustomizeCRDs, services, operatorsAdvanced RBAC design, NetworkPolicies, PodSecurityAdmission, and admission controllersMulti-cluster management strategies and federation patternsResource scheduling, quotas, LimitRanges, priority classes, and pod disruption budgetsTroubleshooting node-level, networking (CNI, DNS, Ingress), and storage (CSI, PV/PVC) issuesCluster lifecycle management: upgrades, node pool rotation, and disaster recoveryPerformance tuning: HPA, VPA, KEDA, and resource right-sizingFamiliarity with Rancher management server is a plus.Infrastructure-as-Code (Crossplane & Helm) -Crossplane — Compositions, XRDs, Claims, Providers, and Composition FunctionsUpbound as a managed Crossplane platform — Upbound Spaces, managed control planes, and the Upbound Marketplace for Providers and ConfigurationsHelm 3 — chart development from scratch, subcharts, library charts, values schema validationExperience managing Helm chart repositories (OCI registries)Understanding of Crossplane's continuous reconciliation model and drift detectionExperience with GitOps tooling (ArgoCD or Flux) for deploying Helm releases and Crossplane resourcesFamiliarity with Open Policy Agent (OPA), Gatekeeper, or Kyverno for IaC policy enforcement is a plusArgoCD (Practitioner Usage) -Creating and managing Application resources and ApplicationSet resourcesUnderstanding of App of Apps pattern for organizing infrastructure deploymentsConfiguring sync policies and sync waves for orchestrated rolloutsUsing Helm charts and Kustomize overlays as application sourcesIntegrating ArgoCD applications with Git repositories for GitOps-driven deliveryMonitoring application sync status, health checks, and troubleshooting failed syncsUnderstanding sync errors, drift detection, and manual vs. automated sync behaviorDocker containers -dockerfiledocker build, kanikodocker registrySource code management -Bitbucket (git)GithubGit branchingCode reviews and pull request approvals.Scripting Languages -bashpythonYAMLFamiliarity with PowerShell is a plus.Programming Languages -Go languageGroovyYAMLAnsibleHCL - TerraformCrossplane Composition Functions (Go, Python, or KCL)Databases/Caches:MongoDBPostgreSQLRedisAzure SQL ServerProductivity ToolsJira Software (scrum/Kanban Boards) or a similar ticketing systemConfluence or a similar wiki toolFollow change control methodologies.Excellent communication skills and ability to collaborate with employees at all skill levels; including the ability to translate and communicate technical and analytical issues to all types of end users.Top of FormBottom of Form