Overview
Who We Are Looking For We are seeking a Senior Infrastructure Automation Engineer (Technical Lead) to define and drive automation strategy that scans, configures, and continuously improves infrastructure securely and reliably across on‑prem and cloud environments. You will lead technical design, set standards for Infrastructure as Code (IaC) and configuration management, and partner with platform teams, security, and application teams to reduce risk and manual effort while improving operational consistency through testing, observability, and continuous improvement. You will also mentor engineers and influence stakeholders to adopt scalable, secure-by-default patterns.
What You Will Be Responsible For
- Lead technical design for configuration automation (e.g., Ansible, Puppet, Chef, PowerShell DSC) to enforce secure, compliant, and drift‑resistant baselines at scale.
- Own end-to-end delivery standards for automation code quality: set review and testing expectations, define linting and quality gates in CI/CD, and ensure changes are safe, traceable, and maintainable.
- Create and govern CI/CD pipelines for infrastructure and platform changes, including automated validation, testing, approvals, and rollback strategies.
- Establish observability and operational readiness for automation (logging, metrics, alerting, dashboards); lead troubleshooting and continuous improvement of reliability and performance.
- Lead design and ongoing improvement of data ingestion for infrastructure and security telemetry (e.g., logs, scan results, inventories), including source onboarding, validation, and troubleshooting of ingestion failures.
- Define and implement data transformations to standardise, enrich, and aggregate operational data for reporting and automation use cases (e.g., normalisation, enrichment lookups, deduplication, KPI logic), and ensure consistent metric definitions.
- Apply cloud concepts when designing automation and integrations (identity/IAM, networking, secrets, tagging, storage, monitoring) and set reusable patterns that teams can adopt across on‑prem and cloud environments.
- Partner with security and risk teams to embed secure-by-default practices (secrets management, least privilege, hardening, vulnerability remediation) into automation and delivery workflows.
- Collaborate across engineering teams to drive adoption of patterns and controls; influence stakeholders through clear documentation, training, and pragmatic trade-off decisions.
- Mentor and coach engineers through reviews, pairing, and technical guidance; raise the bar on code quality, testing, and engineering practices.
What We Value
- Significant hands-on experience automating infrastructure in enterprise environments (cloud and/or on‑prem), with strong understanding of networking, compute, storage, and identity fundamentals.
- Proficiency with configuration/automation tooling (Ansible, PowerShell, Puppet, Chef) and ability to design reusable modules, roles, and standards.
- Strong experience building and operating CI/CD pipelines (e.g., Azure DevOps, GitHub Actions, GitLab CI, Jenkins), including code review practices, branching strategies, and release governance.
- Strong engineering discipline around code quality (design reviews, peer review, linting, automated testing), and experience implementing quality gates and standards across a team.
- Scripting skills in one or more languages (Python, PowerShell, Bash) and comfort working with YAML/JSON; able to set patterns for maintainability and testability.
- Experience with data ingestion patterns for operational/security telemetry (e.g., APIs, forwarders/agents, event hubs/queues, file drops), including validation and troubleshooting.
- Experience designing and implementing data transformations for reporting/automation (parsing, normalisation, enrichment, aggregation) using tools such as SPL/SQL/Python as appropriate.
- Working knowledge of cloud concepts (e.g., IAM/identity, networking, storage, monitoring, tagging) and ability to apply them to automation design and governance.
- Working knowledge of secrets management (e.g., Azure Key Vault, HashiCorp Vault) and secure engineering practices, including least privilege and credential hygiene.
- Experience collaborating with security, risk, and audit partners to implement controls through automation (e.g., CIS benchmarks, NIST, ISO 27001) and to evidence compliance.
- Ability to lead technical discussions, communicate clearly with technical and non-technical stakeholders, and make sound trade-off decisions.
Education And Qualifications
- 8+ years of experience in infrastructure automation or related role
- A Bachelor’s degree in Information Technology, Computer Science, Information Security, or a related field is required
- Experience in managing compliance programs and/or familiarity with security frameworks and standards such as CIS, NIST, or ISO 27001
- Experience in leading technical teams on enterprise scale initiatives.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Discover more information on jobs at StateStreet.com/careers
Read our CEO Statement
Job ID: R-788863
#J-18808-Ljbffr