Infrastructure Automation Engineer; Terraform-heavy

Bright Vision Technologies is a forward‑thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations. We leverage cutting‑edge technologies to create scalable, secure, and user‑friendly applications.

As we continue to grow, we’re looking for a skilled Infrastructure Automation Engineer (Terraform‑heavy) to join our dynamic team and contribute to our mission of transforming business processes through technology.

This is a fantastic opportunity to join an established and well‑respected organization offering tremendous career growth potential.

• Job Title: Infrastructure Automation Engineer (Terraform‑heavy)
• Location: 100% Remote (Continental United States)
• Position Type: In‑house Bright Vision Technologies SOW engagement (no third‑party client or vendor)
• Salary: $100K - $150K
• Experience: 5+ years
• Sponsorship: No new H1B sponsorship available. H1B transfers welcomed for qualified candidates.
• Employment Type: Full‑time, direct W2 with Bright Vision Technologies (no C2C, no 1099, no third‑party)
• Engagement: Long‑term, multi‑year, aligned to the Bright Vision SOW delivery roadmap
• Compensation: Competitive base salary commensurate with experience, plus benefits.

This is a 100% remote, full‑time, direct W2 position with Bright Vision Technologies.

This role is part of Bright Vision Technologies’ in‑house Statement of Work (SOW) engagement. The client, end customer, and employer for this position is Bright Vision Technologies — there is no third‑party client, vendor, or implementation partner involved.

We do not engage in C2C, 1099, or third‑party arrangements for this role.

All our roles are W2 and no third‑party brokering please. Candidates must be willing to work directly as a full‑time W2 employee of Bright Vision Technologies and contribute to our in‑house SOW deliverables.

However, candidates who are currently on a valid H1B visa and require a transfer are welcome to apply. We will support H1B transfers for qualified candidates.

For every role, a technical coding assessment is mandatory. Please apply only if you are confident in your technical abilities and hands‑on experience.

We are seeking an Infrastructure Automation Engineer with deep Terraform expertise to design, build, and maintain the infrastructure‑as‑code foundations that power our cloud and hybrid environments. This role focuses on creating reusable Terraform modules, hardening pipelines, enforcing policy‑as‑code, and standardizing infrastructure delivery across multiple teams and cloud providers. The ideal candidate brings strong software engineering discipline to infrastructure work, has shipped production‑grade Terraform at scale, and understands the operational realities of managing thousands of resources across many environments and accounts.

• Design, develop, and maintain modular, composable Terraform code that codifies the entire infrastructure estate across cloud accounts and environments.
• Build a library of well‑tested, reusable Terraform modules with clear interfaces, semantic versioning, and comprehensive documentation.
• Implement Terraform automation pipelines using Git Hub Actions, Git Lab CI, Atlantis, Terraform Cloud, or Spacelift, with plan/apply gating, drift detection, and policy enforcement.
• Define and enforce policy‑as‑code using Sentinel, Open Policy Agent (OPA), Conftest, or Checkov to prevent insecure or non‑compliant infrastructure changes.
• Manage Terraform state at scale with appropriate backend strategies, state locking, workspace organization, and disaster recovery patterns.
• Drive multi‑account, multi‑region, and multi‑cloud infrastructure provisioning strategies with clear isolation, naming, and tagging standards.
• Implement infrastructure testing including unit tests with terraform‑compliance, integration tests with Terratest, and policy tests across pull requests.
• Collaborate with security, networking, and platform teams to embed guardrails directly into reusable modules and pipelines.
• Standardize patterns for secrets management, identity federation, and least‑privilege IAM through reusable…