Staff Software Engineer - Infrastructure Automation (Terraform)

Staff Software Engineer - Infrastructure AutomationAt Early Warning, we've powered and protected the U.S. financial system for over thirty years with cutting-edge solutions like Zelle®, Paze?, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.Overall PurposeThe Staff Software Engineer - Infrastructure Automation is a senior hands-on technical contributor responsible for designing, building, and improving the infrastructure-as-code capabilities used to provision and manage infrastructure across Early Warning. This role applies strong software engineering and systems design practices to shared Terraform and Ansible tooling, reusable infrastructure modules, policy-as-code guardrails, and developer enablement capabilities.This position executes complex technical work with general direction, independently makes implementation decisions within established architecture and standards, and may seek guidance for novel, highly ambiguous, or cross-enterprise decisions. The Staff Engineer partners across Cloud Engineering, Platform Engineering, Security, Risk and Compliance, Network Engineering, CI/CD, and other engineering teams to enable secure, reliable, and controlled infrastructure change across cloud and on-premises environments.Essential FunctionsApply software engineering discipline to infrastructure automation by treating modules, policies, and tooling as versioned, tested, reviewed products with clear interfaces, lifecycle practices, and automated regression coverage.Execute complex infrastructure automation assignments with general direction; break work into deliverable components, identify practical implementation solutions, raise risks and dependencies, and seek guidance when decisions extend beyond established architecture or standards.Contribute to the design and evolution of reference architectures for infrastructure-as-code capabilities; maintain architecture decision records and evaluate significant design and build-versus-buy tradeoffs with appropriate technical guidance.Drive adoption of Terraform as a preferred path for infrastructure provisioning across supported cloud and on-premises environments; contribute to module taxonomy, ownership practices, and private registry standards.Design and develop opinionated Terraform modules for AWS services and common service patterns that incorporate security, compliance, observability, encryption, logging, tagging, network placement, and IAM controls by default.Develop clear override and exception patterns that address legitimate use cases while keeping deviations visible, reviewable, auditable, and subject to policy controls.Author composable, semantically versioned Terraform modules and develop automated validation using native Terraform testing, Terratest, tflint, static analysis, and policy evaluation of Terraform plans.Lead engineering and operating practices for HCP Terraform or Terraform Enterprise, including workspaces, run tasks, policy sets, state governance, drift detection, and plan/apply controls.Develop and improve shared Ansible capabilities, including collections, roles, execution environments, automated testing, Molecule, linting, and related engineering standards.Develop configuration-as-code capabilities for network infrastructure, including structured configuration generation, controlled changes and rollback, pre-change validation, post-change verification, compliance checks, and drift detection.Author, test, version, and maintain policy-as-code used to evaluate Terraform plans, Ansible configuration and execution, and Kubernetes admission controls.Build programmatic controls supporting segregation of duties, protected infrastructure state, change review, exception handling, and break-glass processes with appropriate evidence capture and expiration.Implement secure authentication and credential patterns, including OIDC-federated and short-lived IAM roles and dynamic secrets for cloud, database, and infrastructure credentials.Partner with Security, Risk, and Compliance teams to map infrastructure automation controls to applicable requirements, including PCI DSS, SOX ITGC, NYDFS Part 500, and FFIEC expectations, and automate evidence collection where practical.Develop engineering standards, technical documentation, self-service tooling, APIs, and compliance visibility that improve the infrastructure developer experience.Prototype and de-risk complex infrastructure automation and policy problems; mentor engineers and improve design, implementation, testing, and code-review practices across the organization.Partner with CI/CD, AIOps, and observability teams to integrate infrastructure modules, policy controls, telemetry, and control signals into shared engineering workflows.Define and monitor measures of platform effectiveness, including module adoption, policy compliance, plan/apply reliability, and time to remediate infrastructure drift or compliance violations.Support the company's commitment to risk management and protecting the integrity and confidentiality of systems and data.Minimum QualificationsEducation and/or experience typically obtained through a bachelor's degree in computer science, engineering, or a related technical field.Typically eight or more years of related experience in software engineering, cloud engineering, platform engineering, infrastructure engineering, DevOps, or a related technical discipline.Demonstrated strength in software engineering and systems design, including the ability to turn ambiguous technical problems into maintainable, testable solutions and reason about interfaces, state, failure modes, idempotency, and change impact.Demonstrated ability to execute complex technical work with general direction, independently make implementation decisions within established architecture and standards, and recognize when guidance or escalation is needed for novel or enterprise-wide decisions.Demonstrated customer-first approach, balancing internal customer and developer needs with security, reliability, and control requirements.Ability to respectfully challenge assumptions with data and technical reasoning, then disagree and commit by supporting and executing the final decision.Strong production programming experience in Python, Go, or a comparable general-purpose language used to build infrastructure tooling, services, controllers, or automation.Demonstrated experience developing and operating software, infrastructure tooling, or platform capabilities relied upon by other engineers, including testing, code review, versioning, and operational ownership.Strong hands-on experience with Terraform, including reusable module development, composition, automated testing, registry publishing, versioning, state management, and infrastructure change workflows.Experience with Ansible beyond basic playbooks, such as reusable roles or collections, execution environments, automated testing, linting, or Ansible Automation Platform/AWX.Experience implementing policy-as-code or infrastructure policy controls using OPA/Rego or comparable technologies.Strong knowledge of AWS infrastructure and security concepts, including IAM, networking, encryption, credential management, and secure configuration.Working knowledge of Kubernetes and containerized infrastructure sufficient to implement infrastructure and admission-control requirements.Experience implementing security, compliance, or change-management controls through infrastructure automation in a regulated or similarly controlled environment.Demonstrated ability to lead complex technical work, collaborate across engineering disciplines, and influence implementation decisions without direct authority.Strong written and verbal communication skills, including technical documentation, architecture decision records, implementation standards, and control documentation.Background and drug screen.Preferred QualificationsExperience with HCP Terraform or Terraform Enterprise, including workspaces, run tasks, policy integration, state governance, and drift management.Experience developing internal developer platforms, infrastructure self-service tooling, or developer portals.Experience leading a complex infrastructure automation capability from design through production implementation with periodic architectural or stakeholder guidance.Experience building web-based internal engineering tools using React, Next.js, Angular, or a similar framework and backend/API technologies such as TypeScript, Python, or Go.Experience automating network infrastructure configuration, validation, compliance, or change-management workflows.Experience implementing federated identity, OIDC-based workload authentication, dynamic secrets management, or short-lived infrastructure credentials.Experience mapping automated infrastructure controls to regulatory or control frameworks such as PCI DSS, SOX ITGC, NYDFS Part 500, or FFIEC guidance.Experience in FinTech, banking, payments, or another highly regulated industry.Current AWS, Terraform, Kubernetes, or other relevant technical certification.The above job description is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow instructions and perform other related duties as assigned by their supervisor.Physical RequirementsWorking conditions consist of a normal office environment. Work is primarily sedentary and requires extensive use of a computer and involves sitting for periods of approximately four hours. Work may require occasional standing, walking, kneeling, and reaching. Must be able to lift 10 pounds occasionally and/or a negligible amount of force Early Warning Services