Infrastructure as Code (IaC) Engineer

Stefanini Group is hiring!

Stefanini is looking for an Infrastructure as Code (IaC) Engineer for Grand Rapids MI (Hybrid).

For quick Apply please reach out to Atika Nagar: /

W2 candidates only!

100% Hybrid

Expenses allowed: no

Client Equipment to be Provided

Job Summary:

We are seeking an experienced Infrastructure as Code (IaC) Engineer (Contract) to support a centralized cloud enablement team responsible for building deploying and operating standardized AWS infrastructure using Terraform Spacelift Rundeck and GitHub.

This role focuses on creating and maintaining reusable IaC patterns build and deployment automation and governance controls that enable secure scalable self service infrastructure across a multi account AWS environment. The contractor will work closely with platform security and application teams to deliver reliable paved road solutions while maintaining strong compliance and operational rigor.

Essential Functions:

1. Design build and maintain Terraform modules and IaC patterns used by multiple delivery teams.
2. Implement and operate Terraform deployments via Spacelift including stack design approvals drift detection and environment promotion.
3. Develop and maintain Rundeck jobs for AWS operational automation break glass actions and platform support workflows.
4. Build and support GitHub based CI/CD pipelines using GitOps principles (PR driven change control).
5. Establish and enforce AWS standards for:

1. Account structure and environments
2. Tagging cost allocation and ownership
3. Security access control and auditability

1. Implement secure automation using IAM roles OIDC and least privilege access.
2. Collaborate with application and platform teams to onboard workloads to standardized IaC tooling.
3. Produce and maintain documentation runbooks and onboarding guides.
4. Troubleshoot IaC pipeline and automation failures; participate in root cause analysis as needed.

TECHNICAL SKILLS

Must Have

1. AWS Cloud Expertise
2. GitHub & CI/CD
3. Operational & Collaboration Skills
4. Rundeck (Operational Automation)
5. Security & Compliance
6. Spacelift (Terraform Orchestration)
7. Terraform experience in production AWS environments.

Nice To Have

1. Experience migrating teams into centralized IaC or platform tooling.
2. FinOps experience (cost tagging chargeback/showback)
3. Policy-as-code exposure (OPA Sentinel or equivalent)
4. Terraform tooling: tflint checkov tfsec infracost

#LI-AN1

#LI-HYBRID

Qualifications:

Infrastructure as Code (Terraform)

1. 5 years of hands on Terraform experience in production AWS environments.
2. Advanced experience with:
   1. Module design reuse and versioning
   2. Remote state using S3 and DynamoDB
   3. Multi account and multi environment deployments
   4. Standards enforcement via validation and lifecycle rules
3. Experience supporting centralized Terraform modules consumed by many teams.

AWS Cloud Expertise

1. Strong practical experience with:
   1. AWS Organizations SCPs and multi account strategies
   2. Cross account IAM role design
   3. Account bootstrap / landing zone concepts
2. Hands on experience provisioning AWS services via Terraform including:
   1. IAM
   2. VPC and networking
   3. EC2 / Auto Scaling
   4. EKS or ECS (working knowledge)
   5. S3 RDS
   6. CloudWatch and logging
   7. KMS and encryption

Spacelift (Terraform Orchestration)

1. Production experience using Spacelift for Terraform:
   1. Stack and dependency design
   2. Environment promotion and approvals
   3. Worker configuration (private or AWS hosted preferred)
   4. Drift detection and scheduled runs
2. Experience integrating Spacelift with AWS IAM and GitHub workflows.

Rundeck (Operational Automation)

1. Experience designing and operating Rundeck jobs for AWS infrastructure operations.
2. Strong understanding of:
   1. Job security RBAC and approvals
   2. Credential management using IAM roles (no static keys)
   3. Error handling retries and notifications
3. Familiarity with job as code or version controlled job patterns.

GitHub & CI/CD

1. Enterprise GitHub experience including:
   1. Branch protection rules and CODEOWNERS
   2. Required reviews and PR based change control
   3. GitHub Actions for CI/CD
   4. OIDC based authentication to AWS
2. Strong understanding of GitOps delivery models.

Security & Compliance

1. Experience implementing:
   1. Least privilege IAM and permission boundaries
   2. Secure secrets handling (no credentials in code)
   3. Approval workflows and separation of duties
2. Ability to embed security and compliance into IaC pipelines rather than manual processes.
3. Experience in regulated or risk sensitive environments strongly preferred.

Operational & Collaboration Skills

1. Strong troubleshooting and operational mindset.
2. Experience supporting shared platforms used by many teams.
3. Ability to document solutions clearly and enable team adoption.
4. Strong communication skills and comfort working with cross functional stakeholders.

Listed salary ranges may vary based on experience qualifications and local market. Also some positions may include bonuses or other incentives.

Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face-to-face conversations will involve a description of the job for which you have applied. We also speak with you about the process including interviews and job offers.

About Stefanini Group:

The Stefanini Group is a global provider of offshore onshore and near shore outsourcing IT digital consulting systems integration application and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas Europe Africa and Asia and more than four hundred clients across a broad spectrum of markets including financial services manufacturing telecommunications chemical services technology public sector and utilities. Stefanini is a CMM level 5 IT consulting company with a global presence. We are CMM Level 5 company.