{"id":162151,"url":"https://alion.io/job/earlywarning-staff-software-engineer-infrastructure-automation","title":"Staff Software Engineer - Infrastructure Automation (Terraform)","company":{"id":46312,"name":"Early Warning Services","domain":"earlywarning.com","url":"https://alion.io/company/earlywarning","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":12,"ghost_share":0,"stale_share":0.583,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Scottsdale, United States","Chicago, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":124000,"max":165000,"currency":"USD","period":"year","gross":null,"usd_annual":165000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AIOps","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"AWX","optional":false},{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Angular","optional":true},{"name":"Harbor","optional":true},{"name":"JavaScript","optional":true},{"name":"Next.js","optional":true},{"name":"React.js","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-08-27T00:00:00Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-22T13:26:19Z","board_verified":true,"closed_at":null,"days_open":57,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":56},"description":"At Early Warning, we’ve powered and protected the U.S. financial system for over thirty years with cutting-edge solutions like Zelle®, Paze℠, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.\nPositions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.\nCandidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.\nOverall Purpose\nThe Staff Software Engineer - Infrastructure Automation is a senior hands-on technical contributor responsible for designing, building, and improving the infrastructure-as-code capabilities used to provision and manage infrastructure across Early Warning. This role applies strong software engineering and systems design practices to shared Terraform and Ansible tooling, reusable infrastructure modules, policy-as-code guardrails, and developer enablement capabilities.\nThis position executes complex technical work with general direction, independently makes implementation decisions within established architecture and standards, and may seek guidance for novel, highly ambiguous, or cross-enterprise decisions. The Staff Engineer partners across Cloud Engineering, Platform Engineering, Security, Risk and Compliance, Network Engineering, CI/CD, and other engineering teams to enable secure, reliable, and controlled infrastructure change across cloud and on-premises environments.\nEssential Functions\nApply software engineering discipline to infrastructure automation by treating modules, policies, and tooling as versioned, tested, reviewed products with clear interfaces, lifecycle practices, and automated regression coverage.\nExecute complex infrastructure automation assignments with general direction; break work into deliverable components, identify practical implementation solutions, raise risks and dependencies, and seek guidance when decisions extend beyond established architecture or standards.\nContribute to the design and evolution of reference architectures for infrastructure-as-code capabilities; maintain architecture decision records and evaluate significant design and build-versus-buy tradeoffs with appropriate technical guidance.\nDrive adoption of Terraform as a preferred path for infrastructure provisioning across supported cloud and on-premises environments; contribute to module taxonomy, ownership practices, and private registry standards.\nDesign and develop opinionated Terraform modules for AWS services and common service patterns that incorporate security, compliance, observability, encryption, logging, tagging, network placement, and IAM controls by default.\nDevelop clear override and exception patterns that address legitimate use cases while keeping deviations visible, reviewable, auditable, and subject to policy controls.\nAuthor composable, semantically versioned Terraform modules and develop automated validation using native Terraform testing, Terratest, tflint, static analysis, and policy evaluation of Terraform plans.\nLead engineering and operating practices for HCP Terraform or Terraform Enterprise, including workspaces, run tasks, policy sets, state governance, drift detection, and plan/apply controls.\nDevelop and improve shared Ansible capabilities, including collections, roles, execution environments, automated testing, Molecule, linting, and related engineering standards.\nDevelop configuration-as-code capabilities for network infrastructure, including structured configuration generation, controlled changes and rollback, pre-change validation, post-change verification, compliance checks, and drift detection.\nAuthor, test, version, and maintain policy-as-code used to evaluate Terraform plans, Ansible configuration and execution, and Kubernetes admission controls.\nBuild programmatic controls supporting segregation of duties, protected infrastructure state, change review, exception handling, and break-glass processes with appropriate evidence capture and expiration.\nImplement secure authentication and credential patterns, including OIDC-federated and short-lived IAM roles and dynamic secrets for cloud, database, and infrastructure credentials.\nPartner with Security, Risk, and Compliance teams to map infrastructure automation controls to applicable requirements, including PCI DSS, SOX ITGC, NYDFS Part 500, and FFIEC expectations, and automate evidence collection where practical.\nDevelop engineering standards, technical documentation, self-service tooling, APIs, and compliance visibility that improve the infrastructure developer experience.\nPrototype and de-risk complex infrastructure automation and policy problems; mentor engineers and improve design, implementation, testing, and code-review practices across the organization.\nPartner with CI/CD, AIOps, and observability teams to integrate infrastructure modules, policy controls, telemetry, and control signals into shared engineering workflows.\nDefine and monitor measures of platform effectiveness, including module adoption, policy compliance, plan/apply reliability, and time to remediate infrastructure drift or compliance violations.\nSupport the company's commitment to risk management and protecting the integrity and confidentiality of systems and data.\nMinimum Qualifications\nEducation and/or experience typically obtained through a bachelor's degree in computer science, engineering, or a related technical field.\nTypically eight or more years of related experience in software engineering, cloud engineering, platform engineering, infrastructure engineering, DevOps, or a related technical discipline.\nDemonstrated strength in software engineering and systems design, including the ability to turn ambiguous technical problems into maintainable, testable solutions and reason about interfaces, state, failure modes, idempotency, and change impact.\nDemonstrated ability to execute complex technical work with general direction, independently make implementation decisions within established architecture and standards, and recognize when guidance or escalation is needed for novel or enterprise-wide decisions.\nDemonstrated customer-first approach, balancing internal customer and developer needs with security, reliability, and control requirements.\nAbility to respectfully challenge assumptions with data and technical reasoning, then disagree and commit by supporting and executing the final decision.\nStrong production programming experience in Python, Go, or a comparable general-purpose language used to build infrastructure tooling, services, controllers, or automation.\nDemonstrated experience developing and operating software, infrastructure tooling, or platform capabilities relied upon by other engineers, including testing, code review, versioning, and operational ownership.\nStrong hands-on experience with Terraform, including reusable module development, composition, automated testing, registry publishing, versioning, state management, and infrastructure change workflows.\nExperience with Ansible beyond basic playbooks, such as reusable roles or collections, execution environments, automated testing, linting, or Ansible Automation Platform/AWX.\nExperience implementing policy-as-code or infrastructure policy controls using OPA/Rego or comparable technologies.\nStrong knowledge of AWS infrastructure and security concepts, including IAM, networking, encryption, credential management, and secure configuration.\nWorking knowledge of Kubernetes and containerized infrastructure sufficient to implement infrastructure and admission-control requirements.\nExperience implementing security, compliance, or change-management controls through infrastructure automation in a regulated or similarly controlled environment.\nDemonstrated ability to lead complex technical work, collaborate across engineering disciplines, and influence implementation decisions without direct authority.\nStrong written and verbal communication skills, including technical documentation, architecture decision records, implementation standards, and control documentation.\nBackground and drug screen.\nPreferred Qualifications\nExperience with HCP Terraform or Terraform Enterprise, including workspaces, run tasks, policy integration, state governance, and drift management.\nExperience developing internal developer platforms, infrastructure self-service tooling, or developer portals.\nExperience leading a complex infrastructure automation capability from design through production implementation with periodic architectural or stakeholder guidance.\nExperience building web-based internal engineering tools using React, Next.js, Angular, or a similar framework and backend/API technologies such as TypeScript, Python, or Go.\nExperience automating network infrastructure configuration, validation, compliance, or change-management workflows.\nExperience implementing federated identity, OIDC-based workload authentication, dynamic secrets management, or short-lived infrastructure credentials.\nExperience mapping automated infrastructure controls to regulatory or control frameworks such as PCI DSS, SOX ITGC, NYDFS Part 500, or FFIEC guidance.\nExperience in FinTech, banking, payments, or another highly regulated industry.\nCurrent AWS, Terraform, Kubernetes, or other relevant technical certification.\nThe above job description is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow instructions and perform other related duties as assigned by their supervisor.\nPhysical Requirements\nWorking conditions consist of a normal office environment. Work is primarily sedentary and requires extensive use of a computer and involves sitting for periods of approximately four hours. Work may require occasional standing, walking, kneeling, and reaching. Must be able to lift 10 pounds occasionally and/or a negligible amount of force frequently. Requires visual acuity and dexterity to view, prepare, and manipulate documents and office equipment, including personal computers. Requires the ability to communicate with internal and/or external customers.\nEmployee must be able to perform essential functions and physical requirements of the position with or without reasonable accommodation.\nCandidates responding to this posting must independently possess the eligibility to work in the United States at the date of hire.\nThe base pay scale for this position in:\nPhoenix, AZ/ Chicago, IL in USD per year is: $124,000 - $165,000.\nSan Francisco, CA in USD per year is: $149,000 - $198,000.\nAdditionally, candidates are eligible for a discretionary incentive plan and benefits.\nThis pay scale is subject to change and is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific candidate, which is always dependent on legitimate factors considered at the time of job offer. Early Warning Services takes into consideration a variety of factors when determining a competitive salary offer, including, but not limited to, the job scope, market rates and geographic location of a position, candidate’s education, experience, training, and specialized skills or certification(s) in relation to the job requirements and compared with internal equity (peers). The business actively supports and reviews wage equity to ensure that pay decisions are not based on gender, race, national origin, or any other protected classes.\nSome of the Ways We Prioritize Your Health and Happiness\nHealthcare Coverage - Competitive medical (PPO/HDHP), dental, and vision plans as well as company contributions to your Health Savings Account (HSA) or pre-tax savings through flexible spending accounts (FSA) for commuting, health & dependen...","description_format":"text","description_chars":13671,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Hybrid work","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Illinois","iso":null,"kind":"city"},{"name":"California","iso":null,"kind":"city"},{"name":"Arizona","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Fraud Detection","Payment Processing & Gateways","RegTech, AML & Compliance"],"lifecycle":[{"event":"open","at":"2026-08-27T00:00:00Z"},{"event":"close","at":"2026-09-02T14:54:04Z"},{"event":"reopen","at":"2026-09-03T05:54:10Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 27 · green card filings: 21","filings_12m":27,"filings_prev_12m":57,"green_card_filings_12m":21,"median_offered_wage_usd":148125,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":21}],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.539,"p_room":0.45,"age_days":56,"expected_fill_days":29,"reasons":["conf:22","stale_co","urgency","velocity","win:tail"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":165000,"is_top_pay":false},"html_url":"https://alion.io/job/earlywarning-staff-software-engineer-infrastructure-automation","json_url":"https://alion.io/job/earlywarning-staff-software-engineer-infrastructure-automation.json","meta":{"generated_at":"2026-10-23T00:44:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1258,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46312},"rest":"https://alion.io/mcp/rest/get_company?id=46312"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fearlywarning-staff-software-engineer-infrastructure-automation"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fearlywarning-staff-software-engineer-infrastructure-automation"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fearlywarning-staff-software-engineer-infrastructure-automation"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/earlywarning-staff-software-engineer-infrastructure-automation\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fearlywarning-staff-software-engineer-infrastructure-automation"}]}