Information Technology Infrastructure Engineer - Cloud Platform

Summary of Job Responsibilities This position is part of a team responsible for providing PERA’s development and infrastructure teams with secure, standardized, and self-service cloud platforms on AWS, connected to PERA’s on-premises environment.
Participate with building the foundation, automate provisioning and compliance with Infrastructure as Code, and keep the platform current, supported, and resilient.
Uses strong knowledge of AWS cloud networking, access management, containers (ECS) and Kubernetes (EKS), CI/CD and GitOps, and Infrastructure as Code tooling such as Terraform.
You are hands-on in building reusable modules, templates, and automation, and in creating appropriate documentation, standards, and procedures while following essential security requirements. Essential Duties and Responsibilities Employees are held accountable for all duties of the job.
Individuals must be able to perform these duties with or without reasonable accommodations. * Build, implement, and operate AWS landing zones, networking, identity, and guardrails to a documented standard * Enforce security, compliance, and tagging standards through automated policy as code, and produce audit evidence on request * Maintain and publish a catalog of versioned Infrastructure as Code modules, pipeline templates, and reference architectures * Enable self-service provisioning so teams can deploy approved infrastructure in minutes or hours, not weeks, without opening manual requests * Run patching, version upgrades, deprecation of retiring services, and capacity and quota planning on a predictable schedule * Integrate the platform with enterprise tooling, including ServiceNow for requests, changes, and incidents, and with security and logging tools * Provide Tier-2/3 support for cloud and platform issues, meeting agreed platform service objectives * Define and test backup, disaster recovery, and failover against agreed recovery time and recovery point objectives * Evaluate new cloud services and platform tooling, and provide adoption recommendations, documented standards, and migration guidance * Support migration and modernization of on-premises workloads, including hybrid connectivity * Govern cloud spend through tagging, budgets, and quotas, and provide show back reporting that gives teams visibility into their cloud costs * Collaborate with security, networking, application, and database teams, including partners who run on-premises systems, and gather feedback from development and infrastructure teams to help prioritize work intake * Write standards, patterns, and onboarding guides, and teach and coach teams on cloud, IaC, and platform use * Perform other duties as assigned Job Qualifications * Degree in technical (STEM) field and four years’ experience in technical role preferred or equivalent combination of education and experience * AWS Practitioner/Associate and GitHub Enterprise certifications preferred * Experience as an SME within multiple key technologies/platforms within the assigned technology domain with a solid understanding of system security implications * Experience managing cloud landing zones on AWS, including multi-account structure, organizational guardrails, baseline configuration, and tagging standards (AWS Organizations and Control Tower) * Experience with Infrastructure as Code at scale, including Terraform (plus CloudFormation as needed), reusable modules, remote state, testing, versioning, and drift detection * Strong cloud networking, including VPC design, routing, DNS, load balancing, firewalls, VPC endpoints, and hybrid connectivity to on-premises (VPN, Direct Connect) * Experience with container and Kubernetes platforms, including managed containers (ECS) and Kubernetes (EKS), cluster lifecycle and upgrades, ingress, Helm and GitOps deployment * Knowledge of cloud security and compliance, including policy as code (service control policies, OPA or Kyverno), encryption, and vulnerability management * Experience with platform CI/CD and GitOps, including shared pipeline templates, self-hosted runners and agents, artifact and image registries, and standard deployment strategies * Experience with self-service and developer enablement, including golden paths, service catalog, templates, and an internal developer portal * Experience with platform monitoring integration (standard logging, metrics, and alerting) and cloud cost governance (tagging, budgets, quotas, and show back) * Hybrid infrastructure fluency, including on-premises integration alongside AWS and Kubernetes * Experience with scripting and automation such as Python, PowerShell, and Bash, and cloud APIs and SDKs, to automate provisioning and operations * Disciplined change management and clear documentation and communication, including standards, patterns, and onboarding guides that others can follow without help Working Conditions The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. * Standard office environment with frequent telephone communication, computer operation, and other office productivity machinery, such as a copy and printer machine. * Occasional moving and positioning supplies in excess of 20 pounds * All employees are expected to present themselves in a professional manner in alignment with the financial services industry * Ability to sit for prolonged periods of time * Ability to operate standard PC equipment * Ability to manage frequent deadlines and tight schedules Hybrid Work Option * Opportunity to work from home up to three days per week.
Eligibility dependent upon factors detailed in PERA's Work from Home Policy.