- Architect serverless and event-driven automation using Lambda, Step Functions, EventBridge, SNS/SQS, S3 triggers, and Systems Manager; build scalable, cross-account automation across AWS Organizations with proper IAM boundaries, aligned with CIS, NIST, and AWS Well-Architected standards.

- Develop and own custom Helm charts for multi-environment Kubernetes deployments; manage the full Helm lifecycle upgrades, rollbacks, canary releases; drive GitOps adoption using ArgoCD or Flux; automate namespace management, RBAC, secrets, and network policies.

- Build reusable, versioned Terraform modules covering AWS networking, IAM, EKS, ECS, RDS, and security controls; implement CI/CD pipelines for IaC using GitHub Actions or Azure DevOps, with automated testing, linting, drift detection, and policy enforcement.

- Automate CIS benchmark enforcement, vulnerability remediation, and infrastructure hardening; integrate with CyberArk, AWS Secrets Manager, and SSM Parameter Store; implement policy-as-code using OPA, Gatekeeper, or Conftest; automate certificate lifecycle management end to end.

- Connect automation workflows to New Relic and LogicMonitor for telemetry-driven triggers; build self-healing routines that detect, diagnose, and resolve incidents automatically; convert operational runbooks into automated diagnostic workflows to cut MTTR.

- Integrate automation into SymphonyAI-driven ticketing, approval flows, CMDB updates, and change management processes; build runbooks that map directly to ITSM workflows.

Requirements :

- 8+ years of total experience, with the last 6 years continuously focused on hands-on automation, including automation strategy and framework architecture.

- Hands-on expertise building automation using industry-standard tools and frameworks.

- Proven record designing scalable automation solutions and leading automation initiatives end to end.

- Deep Terraform knowledge reusable module design covering AWS networking, IAM, EKS, ECS, RDS, and security controls, with CI/CD integration (GitHub Actions or Azure DevOps) including testing, linting, drift detection, and policy enforcement.

- Solid AWS architecture knowledge serverless/event-driven automation (Lambda, Step Functions, EventBridge, SNS/SQS, S3 triggers, Systems Manager), IAM design, cross-account automation across AWS Organizations, multi-account networking aligned with CIS, NIST, and AWS Well-Architected standards.

- Experience with security and compliance automation CIS benchmark enforcement, vulnerability remediation, infrastructure hardening, certificate lifecycle management, and integration with CyberArk, AWS Secrets Manager, and SSM Parameter Store.

- Proficiency in Python, Bash, or PowerShell for automation scripting, with proven ability to build production-grade automation frameworks end-to-end.

- Current title must include "Architect" candidates currently titled Automation Engineer, QA Automation Lead, DevOps Engineer, Cloud Engineer, or other non-architect titles will not be considered.

Good to Have :

- Experience with policy-as-code (OPA, Gatekeeper, Conftest) and IaC testing tools (Molecule, Terratest, Checkov, tfsec).

- Experience with multi-account AWS automation, service mesh (Istio/Linkerd), and ITSM integration (SymphonyAI or equivalent).