Infrastructure as Code Engineer

Job not on LinkedIn

🔥 16 hours ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vesta Software Group

WebsiteLinkedInAll Job Openings

201 - 500 employees

🏢 Enterprise

🤝 B2B

Software • Enterprise • B2B

Vesta Software Group is a global organization specializing in the acquisition and long-term growth of vertical market software companies. Unlike traditional acquirers, Vesta operates on a buy-and-hold strategy, maintaining the independence of the companies they acquire and investing in their sustainable growth. Vesta prides itself on never selling a business, instead prioritizing the autonomy of its acquired companies and leveraging a network of resources to accelerate growth. With more than 30 acquisitions and a presence in over 9 countries, Vesta supports its portfolio companies with best practices and capital while fostering a productive and positive workplace culture, demonstrated by its Great Place To Work® certification.

📋 Description

• Audit our existing AWS environment, including the current admin web application, and assess what should be preserved, wrapped or retired as part of the target design • Design and implement a modular, reusable Terraform codebase covering our core AWS infrastructure (compute, networking, storage, IAM and managed services), replacing manual/console-driven provisioning and the parts of the existing admin tool that fall outside a proper audit trail • Set up remote state management with locking (for example S3 and DynamoDB) and encryption at rest, and define access controls so state files are never stored locally or committed to version control • Build and integrate CI/CD pipelines that plan, validate and apply Terraform changes automatically, including automated policy and security scanning (Checkov, tfsec) on every pull request • Establish version control workflows, module structure and environment separation (dev/staging/prod and demo) so every infrastructure change is peer reviewed, logged and attributable to a person and a pull request • Embed our existing compliance obligations into reusable modules and pipeline checks: secure configuration and patch/update tracking relevant to Cyber Essentials Plus, access control and logging relevant to ISO 27001, and change control and data handling discipline relevant to our Bacs Approved Bureau status • Sequence the migration plan so it does not put ISO 27001 certification at risk, given our audit falls within this contract window. You are not responsible for managing or liaising on the audit itself, but the phasing, rollback approach and documentation must be aware of that date • Design and build an on-demand ephemeral environment capability: a full, isolated stack that a developer or QA engineer can spin up on demand, run a complete test pass against, and tear down automatically afterward • Ensure any fixture or seed data used in ephemeral test environments is synthetic or properly masked, not copied production data, given BAB rules on customer data handling and verification • Document architecture decisions, runbooks and module usage so the environment is maintainable after the engagement ends • Deliver hands-on training and workshops for the internal CTO, DevOps and infrastructure team, pairing with staff, including the lead DevOps engineer who built the current admin tool, on real migration work • Define a phased migration plan that brings existing infrastructure under code without service disruption, prioritising the highest risk manual and unaudited changes first • Produce a transition and handoff plan and knowledge transfer materials ahead of contract end, with a clear list of what the internal team owns going forward

🎯 Requirements

• Proven hands-on Terraform experience at an enterprise level: module design, state management, workspaces and multi-environment patterns, not just tutorial-level familiarity • Deep working knowledge of AWS services: EC2, VPC, IAM, RDS/Aurora, ECS/EKS, Lambda, ELB, S3 • Experience building CI/CD pipelines for infrastructure (GitHub Actions, GitLab CI, Jenkins or CircleCI) • Experience designing ephemeral/on-demand environments (PR- or job-triggered stack creation and teardown, database seeding from masked snapshots or synthetic fixtures, automated cost/resource cleanup) • Scripting ability in Python and/or Bash for automation and tooling glue • Experience with IaC security and compliance scanning tools (Checkov, tfsec or similar) and secrets management • Experience embedding audit trails and change control evidence into infrastructure workflows, able to speak concretely to how Terraform plus CI/CD produces the traceability an unaudited admin script cannot • Working familiarity with UK compliance regimes relevant to us: ISO 27001 controls (access control, logging, risk treatment), Cyber Essentials Plus control areas (secure configuration, patch management, access control), and Bacs Approved Bureau requirements around change control and data handling • Demonstrated experience training, mentoring or upskilling engineering teams; teaching ability is a hard requirement here, not a nice to have • Experience leading or contributing to a brownfield migration (existing manual/bespoke automation to IaC), including the judgement to assess and diplomatically integrate with tooling already built by internal staff • Strong written documentation skills, since your output is only as valuable as what the team can run without you afterward.

🏖️ Benefits

• 25 days annual leave plus a day for your birthday or significant celebration • Private Health Insurance • Life Assurance at 4x base salary • Enhanced company pension contribution • Personal Travel Insurance • Access to Benefiz benefits platform and a range of opt-in benefits • Electric/Hybrid Vehicle scheme and Cycle to Work scheme • 10-day rolling sick plan including extended illness pay • EAP and Mental Health First Aider support