IaC Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Design, implement, and maintain secure Infrastructure as Code solutions for cloud and containerized environments that support AI security workloads.

• Take ownership and manage EKS clusters, including node group configurations, networking policies, RBAC, and pod security standards to facilitate secure AI model development and deployment.

• Develop and uphold hardened Terraform modules, configurations, and reusable infrastructure patterns that incorporate security controls (e.g., least-privilege IAM, encryption-at-rest, network segmentation).

• Construct and oversee Docker images and Helm charts adhering to security-first principles—image scanning, minimal base images, secrets management, and signed artifacts.

• Incorporate security guardrails into CI/CD pipelines, which include automated policy checks (e.g., OPA/Gatekeeper, Checkov, tfsec) for infrastructure deployments.

• Automate the provisioning, scaling, configuration, and release processes of environments, emphasizing immutable infrastructure and drift detection.

• Collaborate with AI security engineers, platform teams, and DevSecOps to guarantee that the infrastructure supports threat modeling, vulnerability management, and incident response requirements.

• Diagnose and resolve infrastructure security issues spanning Kubernetes, Terraform, CI/CD, and container platforms.

• Ensure infrastructure compliance with organizational security policies, regulatory frameworks (e.g., NIST, CIS Benchmarks), and operational best practices.

• Document secure infrastructure patterns, deployment runbooks, and automation workflows for the AI security development team.

⛳️ Requirements

• A Bachelor’s degree is preferred, along with relevant experience considered equivalent.

• Significant hands-on experience in designing and implementing secure Infrastructure as Code solutions within cloud and containerized environments.

• Extensive production experience managing Kubernetes, including EKS cluster administration, networking, RBAC, and workload security.

• Strong expertise with Terraform, particularly in developing reusable modules and secure infrastructure provisioning patterns.

• Practical experience in building and managing Docker images and Helm charts for containerized deployments.

• Experience in integrating infrastructure automation into CI/CD pipelines with automated validation and deployment workflows.

• A solid understanding of infrastructure security best practices, including IAM, encryption, secrets management, and network segmentation.

• Experience troubleshooting and resolving issues across Kubernetes, Terraform, containers, and deployment pipelines.

• Ability to collaborate effectively with engineering, platform, and DevSecOps teams in a fast-paced environment.

• Preferred Qualifications

• Experience in supporting AI, ML, or security-focused platform workloads within Kubernetes-based environments.

• Familiarity with AWS and cloud-native services related to container orchestration, networking, and infrastructure automation.

• Knowledge of infrastructure security and policy enforcement tools like OPA/Gatekeeper, Checkov, tfsec, or similar solutions.

• Understanding of compliance and security frameworks such as NIST, CIS Benchmarks, or related infrastructure governance standards.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Generous vacation policy and flexible work arrangements.

• Opportunities for professional development and growth.

• Collaborative and innovative work environment.