Who We Are Looking For
We are seeking an Infrastructure Automation Engineer to help design, build, and operate automation that scans and configures infrastructure reliably and securely across on‑prem and cloud environments. You will work closely with platform, security, and application teams to standardize Infrastructure as Code (IaC), improve scanning capabilities, reduce manual effort, and increase operational consistency through testing, observability, and continuous improvement.
What You Will Be Responsible For
- Build and evolve configuration automation (e.g., Ansible, Puppet, Chef, PowerShell DSC) to enforce secure, compliant, and drift‑resistant baselines.
- Create and support CI/CD pipelines for infrastructure and platform changes, including automated validation, testing, approvals, and rollback strategies.
- Instrument automation with logging, metrics, and alerting; troubleshoot failures and continuously improve reliability, performance, and developer experience.
- Embed code quality practices into automation delivery (peer reviews, linting, testing, release notes) and continuously improve maintainability and safety of changes.
- Support data ingestion from infrastructure and security tooling (e.g., logs, scan results, inventories) into reporting platforms; validate inputs and troubleshoot ingestion issues.
- Design and implement basic data transformations to standardise, enrich, and aggregate operational data for reporting and automation use cases (e.g., normalisation, joins/lookups, deduplication).
- Apply cloud concepts when designing automation and integrations (identity/IAM, networking, secrets, tagging, storage) across on‑prem and cloud environments.
- Partner with security and risk teams to embed secure‑by‑default practices (secrets management, least privilege, hardening, vulnerability remediation) into automation.
- Maintain documentation, runbooks, and reference architectures; contribute to internal enablement through templates, examples, and technical guidance.
What We Value
- Hands‑on experience automating infrastructure in enterprise environments (cloud and/or on‑prem), with strong understanding of networking, compute, storage, and identity fundamentals.
- Proficiency with at least one configuration/automation tool (Ansible, PowerShell, Puppet, Chef).
- Experience building CI/CD pipelines (e.g., Azure DevOps, GitHub Actions, GitLab CI, Jenkins) with version control and code review practices.
- Scripting skills in one or more languages (Python, PowerShell, Bash) and comfort working with YAML/JSON.
- Working knowledge of code quality practices (peer review, linting, testing) and ability to follow and improve team engineering standards.
- Experience or familiarity with data ingestion patterns (APIs, file drops, log forwarders/agents) and troubleshooting data pipeline issues.
- Experience performing data transformation and preparation for reporting/analytics (e.g., parsing, normalisation, enrichment, aggregation) using tools such as SPL/SQL/Python as appropriate.
- Working knowledge of cloud concepts (e.g., IAM/identity, networking, storage, monitoring, tagging) and how they affect automation design.
- Working knowledge of secrets management (e.g., Azure Key Vault, HashiCorp Vault) and secure engineering practices.
- Ability to troubleshoot complex systems and communicate clearly with both technical and non‑technical stakeholders.
Education And Qualifications
- 4+ years of experience in infrastructure automation or related role.
- A Bachelor’s degree in Information Technology, Computer Science, Information Security, or a related field is required.
- Experience in managing compliance programs and/or familiarity with security frameworks and standards such as CIS, NIST, or ISO 27001.
State Street is an Equal Opportunity Employer. We consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
#J-18808-Ljbffr