Software Engineer - Infrastructure Automation

Staff Software Engineer
- Infrastructure Automation

At Early Warning, we've powered and protected the U.S. financial system for over thirty years with cutting-edge solutions like Zelle®, Paze℠, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.

Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.

Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.

Overall Purpose

The Staff Software Engineer
- Infrastructure Automation is a senior hands-on technical contributor responsible for designing, building, and improving the infrastructure-as-code capabilities used to provision and manage infrastructure across Early Warning. This role applies strong software engineering and systems design practices to shared Terraform and Ansible tooling, reusable infrastructure modules, policy-as-code guardrails, and developer enablement capabilities.

This position executes complex technical work with general direction, independently makes implementation decisions within established architecture and standards, and may seek guidance for novel, highly ambiguous, or cross-enterprise decisions. The Staff Engineer partners across Cloud Engineering, Platform Engineering, Security, Risk and Compliance, Network Engineering, CI/CD, and other engineering teams to enable secure, reliable, and controlled infrastructure change across cloud and on-premises environments.

Essential Functions

• Apply software engineering discipline to infrastructure automation by treating modules, policies, and tooling as versioned, tested, reviewed products with clear interfaces, lifecycle practices, and automated regression coverage.
• Execute complex infrastructure automation assignments with general direction; break work into deliverable components, identify practical implementation solutions, raise risks and dependencies, and seek guidance when decisions extend beyond established architecture or standards.
• Contribute to the design and evolution of reference architectures for infrastructure-as-code capabilities; maintain architecture decision records and evaluate significant design and build-versus-buy tradeoffs with appropriate technical guidance.
• Drive adoption of Terraform as a preferred path for infrastructure provisioning across supported cloud and on-premises environments; contribute to module taxonomy, ownership practices, and private registry standards.
• Design and develop opinionated Terraform modules for AWS services and common service patterns that incorporate security, compliance, observability, encryption, logging, tagging, network placement, and IAM controls by default.
• Develop clear override and exception patterns that address legitimate use cases while keeping deviations visible, reviewable, auditable, and subject to policy controls.
• Author composable, semantically versioned Terraform modules and develop automated validation using native Terraform testing, Terratest, tflint, static analysis, and policy evaluation of Terraform plans.
• Lead engineering and operating practices for HCP Terraform or Terraform Enterprise, including work spaces, run tasks, policy sets, state governance, drift detection, and plan/apply controls.
• Develop and improve shared Ansible capabilities, including collections, roles, execution environments, automated testing, Molecule, linting, and related engineering standards.
• Develop configuration-as-code capabilities for network infrastructure, including structured configuration generation, controlled changes and rollback, pre-change validation, post-change verification, compliance checks, and drift detection.
• Author, test, version, and maintain policy-as-code used to evaluate Terraform plans, Ansible configuration and execution, and Kubernetes admission controls.
• Build programmatic controls supporting segregation of…