IAC Devops Engineer

Unlock New Career Horizons with SA Technologies Inc. We're Hiring!!! At SA Technologies Inc., we believe in turning career aspirations into reality. As an NSE Listed company, recognized as a CMMI Level 5 organization, a Great Place to Work Certified company, and one of the Best Places for Women, we are committed to creating a workplace that is inclusive, excellent, and supportive.

Engagement: Build and maintain Development, Stage, and Production for a set of AI solutions Role summary The engineer takes full ownership of the AWS infrastructure powering these AI solutions. Built using Terraform and Terragrunt, the platform demands deep hands-on expertise and practical knowledge.

Responsibilities

span the full stack—including edge routing, identity and access, networking, storage, asynchronous workflows, and integrated AI/search services. The engineer will maintain shared, reusable modules across all solutions and manage seamless environment promotion across development, staging, and production environments.

Key responsibilities

● Design, write, and maintain Terraform modules and Terragrunt configuration that can be orchestrated across multiple AWS accounts. ● Build and operate Development, Stage, and Production from that code. ● Own the shared platform: API Gateway, Cloud. Front, WAF, DNS, certificates, IAM, KMS, VPC and endpoints, Lambda, container services, Step Functions, queues, storage, event rules, and the generative-AI and search services in use.

● Keep infrastructure in code. Return any console change to the repository, and keep remote state out of source control. ● Review a Terraform plan before every apply, including what will change, where, and how it will be rolled back. ● Build the pipelines that validate, scan, test, and deploy. A failed check blocks the merge.

● Apply least-privilege IAM and remove unused roles, broad grants, and placeholder policies. ● Keep infrastructure and container security scans in the pipeline, with an enforced quality gate. ● Support application teams on runtime wiring: function and task configuration, environment variables, secrets, and the image produced by the pipeline.

● Maintain the environments after release, including alarms, retention, certificate renewal, and drift. ● Version Control & Branching Strategy: Experience managing Terraform code in Git using trunk-based development or feature branch workflows, ensuring all infrastructure changes are tracked and peer-reviewed. ● GitHub Actions & CI/CD Integration: Hands-on experience building and maintaining GitHub Actions workflows that automatically run terraform fmt, terraform validate, security scans, and terraform plan on every Pull Request.

● Pull Request Plan Reviews: Automatically posting terraform plan output as a comment on GitHub Pull Requests to facilitate asynchronous code and infrastructure reviews before merging. ● Branch Protection & Quality Gates: Enforcing strict branch protection rules in GitHub where passing automated checks (linting, security, and clean plan) and requiring at least one peer review are mandatory pre-requisites to merge into main.

● Module Versioning & Releases: Utilizing Git tagging and semantic versioning for shared Terraform modules stored in private registries or repositories to ensure reproducible and controlled module consumption across environments. Required qualifications ● Hashi. Corp Certified: Terraform Associate (003) certification.

● Hands-on Terraform for production AWS, including modules, remote state per environment, and plan-before-apply. ● Hands-on Terragrunt across more than one AWS account. ● Practical experience building IAM, networking, Lambda, container services, API Gateway, Cloud. Front, WAF, DNS, certificates, and KMS. ● A deployment pipeline the candidate has written and operated, with validation and deployment and without a manual apply.

● Experience turning an existing Terraform codebase into modules that several solutions can share. ● Ability to explain a Terraform plan line by line and to show the evidence that a change worked. ● Granular Terraform state management practices, including remote state backends, state locking, targeted isolation, and state recovery/imports.

● Proficiency in defining and enforcing Terraform best practices, module design, semantic versioning, and standardized directory structuring. ● Hands-on experience integrating IaC linting, automated testing, and security scanning tools (e.g., TFLint, Checkov, Trivy, or Sonar. Qube) into CI/CD pipelines. ● Experience writing and executing unit and integration tests for Terraform code using frameworks such as Terratest or native Terraform test feature.

Preferred qualifications

● Advanced Hashi. Corp certifications, such as Hashi. Corp Certified: Vault Associate/Operations Professional. ● Amazon Bedrock, or another managed generative-AI service, and a vector search service. ● Step Functions, queues, and event-driven processing. ● Container build and registry, with images pinned by digest or immutable tag.

● Infrastructure and container scanners tied to a failing quality gate. ● OAuth or enterprise identity integrated with an API. ● Experience improving inherited infrastructure rather than only starting from an empty account. Ways of working ● A second person reviews the plan and the change. The reviewer is not the author.

● Model-assisted code is a draft until the author can explain it and a reviewer has approved it. ● A change is complete when the pull request, the review, and the plan or deployment output are all attached. Why SA Technologies: Opportunity to work on real-world projects with leading clients Learning-focused environment with mentorship from senior engineers Stable, long-term career growth opportunities