Infrastructure as Code (IaC) Engineer

Custom Business Solutions, Inc

Grand Rapids, MI

JOB DETAILS
SKILLS
Access Control, Amazon Elastic Compute Cloud (EC2), Amazon Simple Storage Service (S3), Amazon Web Services (AWS), Applications Security, Authentication, Automation, Autoscaling, Bootstrap, Change Control, Chargebacks, Cloud Computing, Communication Skills, Continuous Deployment/Delivery, Continuous Integration, Cost Allocation, Cross-Functional, Cryptography, Documentation, GitHub, IAM - Information Assurance Management, Identify Issues, Machine Tool, Maintain Compliance, Process Improvement, Production Systems, Public/Media/Press/Analyst Relations, Risk, Root Cause Analysis, Sales Strategy, Software Engineering, Support Documentation, Team Player
LOCATION
Grand Rapids, MI
POSTED
30 days ago
Infrastructure as Code (IaC) Engineer
Job Summary
We are seeking an experienced Infrastructure as Code (IaC) Engineer to support a centralized cloud enablement team responsible for building, deploying, and operating standardized AWS infrastructure using Terraform, Spacelift, Rundeck, and GitHub.
This role focuses on creating and maintaining reusable IaC patterns, build and deployment automation, and governance controls that enable secure, scalable self-service infrastructure across a multi-account AWS environment. You will work closely with platform, security, and application teams to deliver reliable "paved road solutions while maintaining strong compliance and operational rigor.

Must Have Skills
  • 5+ years of hands-on Terraform experience in production AWS environments
  • Strong AWS cloud infrastructure experience in multi-account environments
  • Production experience with Spacelift for Terraform orchestration
  • Experience designing and operating Rundeck automation jobs
  • Enterprise GitHub experience including GitHub Actions and CI/CD pipelines
  • Strong understanding of GitOps and PR-driven deployment processes
  • Experience implementing secure automation using IAM roles, OIDC, and least-privilege access
  • Experience building reusable Terraform modules and centralized IaC patterns
  • Hands-on experience provisioning AWS services via Terraform:
    • IAM
    • VPC / Networking
    • EC2 / Auto Scaling
    • S3 / RDS
    • CloudWatch / Logging
    • KMS / Encryption
  • Strong troubleshooting, documentation, and cross-functional collaboration skills

Nice to Have Skills
  • Experience with EKS or ECS
  • Experience migrating teams into centralized IaC or platform tooling
  • FinOps experience including cost tagging, chargeback, and showback
  • Policy-as-code exposure (OPA, Sentinel, or equivalent)
  • Experience with Terraform tooling such as tflint, checkov, tfsec, and infracost
  • Experience in regulated or risk-sensitive environments

Essential Functions
  • Design, build, and maintain Terraform modules and IaC patterns used by multiple delivery teams
  • Implement and operate Terraform deployments via Spacelift, including stack design, approvals, drift detection, and environment promotion
  • Develop and maintain Rundeck jobs for AWS operational automation, break-glass actions, and platform support workflows
  • Build and support GitHub-based CI/CD pipelines using GitOps principles (PR-driven change control)
  • Establish and enforce AWS standards for:
    • Account structure and environments
    • Tagging, cost allocation, and ownership
    • Security, access control, and auditability
  • Implement secure automation using IAM roles, OIDC, and least-privilege access
  • Collaborate with application and platform teams to onboard workloads to standardized IaC tooling
  • Produce and maintain documentation, runbooks, and onboarding guides
  • Troubleshoot IaC, pipeline, and automation failures; participate in root cause analysis as needed

Qualifications
Infrastructure as Code (Terraform)
  • Advanced experience with:
    • Module design, reuse, and versioning
    • Remote state using S3 and DynamoDB
    • Multi-account and multi-environment deployments
    • Standards enforcement via validation and lifecycle rules
  • Experience supporting centralized Terraform modules consumed by multiple teams
AWS Cloud Expertise
Strong practical experience with:
  • AWS Organizations, SCPs, and multi-account strategies
  • Cross-account IAM role design
  • Account bootstrap / landing zone concepts
Spacelift (Terraform Orchestration)
Production experience using Spacelift for Terraform:
  • Stack and dependency design
  • Environment promotion and approvals
  • Worker configuration (private or AWS-hosted preferred)
  • Drift detection and scheduled runs
Experience integrating Spacelift with AWS IAM and GitHub workflows
Rundeck (Operational Automation)
  • Strong understanding of:
    • Job security, RBAC, and approvals
    • Credential management using IAM roles (no static keys)
    • Error handling, retries, and notifications
  • Familiarity with job-as-code or version-controlled job patterns
GitHub & CI/CD
Enterprise GitHub experience, including:
  • Branch protection rules and CODEOWNERS
  • Required reviews and PR-based change control
  • GitHub Actions for CI/CD
  • OIDC-based authentication to AWS
Security & Compliance
Experience implementing:
  • Least-privilege IAM and permission boundaries
  • Secure secrets handling (no credentials in code)
  • Approval workflows and separation of duties
Ability to embed security and compliance into IaC pipelines rather than manual processes
Operational & Collaboration Skills
  • Strong operational mindset and troubleshooting ability
  • Experience supporting shared platforms used across multiple teams
  • Ability to clearly document solutions and support adoption
  • Strong communication skills with cross-functional stakeholders

About the Company

C

Custom Business Solutions, Inc

Custom Business Solutions, a Certified Woman-Owned Business Enterprise is a leader in information technology consulting and professional services specializing in the Southeastern Michigan and Mid-Michigan markets. Custom was founded in 1995 with two major goals: Develop long-term satisfied client relationships Develop long-term satisfied employee relationships

We solve our clients' business problems with solutions that create results commensurate with client expectations. We deliver these solutions in ways that make it easy for our customers to do business with us! Custom excels at the rapid implementation of business application solutions allowing us to deliver immediate value to our clients.

CUSTOM offers a wide variety of service options designed to provide our clients' flexible solutions and support. Custom provides skilled professionals with solid experience creating immediate value. Our company has developed a strong client base including industry leaders in insurance, healthcare, finance, accounting and public utilities.

At CUSTOM, we know the importance of talented people with the right technical skills. We understand being successful requires balance between exceptional interpersonal skills and technology. Taking these attributes into account, Custom is able to provide superior personalized service. This simple approach differentiates us from the competition. We call this the 'CUSTOM DIFFERENCE'.

COMPANY SIZE
1 to 9 employees
INDUSTRY
Staffing/Employment Agencies
FOUNDED
1995
WEBSITE
http://www.custom-it.com/