Cloud Automation Architect

Job Title: Cloud Automation Architect

The Role:

We are looking for a senior automation architect who does not just write scripts but someone who builds production-grade automation frameworks from the ground up. You will own the full lifecycle: infrastructure provisioning, configuration, validation, self-healing, and monitoring. If you have spent years turning manual, fragmented ops into reliable, repeatable systems this is built for you.

What You Will Be Responsible For:

1. Ansible Automation:

- Design and maintain enterprise-grade playbooks, roles, and collections.

- Automate OS patching, configuration drift correction, security hardening, and compliance enforcement across AWS, Azure, VMware, and REST-integrated environments. Combine Ansible with Terraform for seamless post-provisioning configuration.

2. AWS Cloud Automation:

- Architect serverless and event-driven automation using Lambda, Step Functions, Event Bridge, SNS/SQS, S3 triggers, and Systems Manager.

- Build scalable, cross-account automation across AWS Organizations with proper IAM boundaries. Align all implementations with CIS, NIST, and AWS Well-Architected standards.

3. Kubernetes & Helm:

- Develop and own custom Helm charts for multi-environment Kubernetes deployments. Manage the full Helm lifecycle including upgrades, rollbacks, and canary releases.

- Drive GitOps adoption using ArgoCD or Flux. Automate namespace management, RBAC, secrets, and network policies.

4. Infrastructure as Code & CI/CD:

- Build reusable, versioned Terraform modules covering AWS networking, IAM, EKS, ECS, RDS, and security controls.

- Implement CI/CD pipelines for IaC using GitHub Actions or Azure DevOps with automated testing, linting, drift detection, and policy enforcement baked in.

5. Security & Compliance Automation:

- Automate CIS benchmark enforcement, vulnerability remediation, and infrastructure hardening.

- Integrate with CyberArk, AWS Secrets Manager, and SSM Parameter Store. Implement policy-as-code using OPA, Gatekeeper, or Conftest. Automate certificate lifecycle management end to end.

6. Observability & Auto-Remediation:

- Connect automation workflows to New Relic and LogicMonitor for telemetry-driven triggers. Build self-healing routines that detect, diagnose, and resolve incidents automatically. Convert operational runbooks into fully automated diagnostic workflows to cut MTTR significantly.

7. ITSM Integration:

- Integrate automation into SymphonyAI-driven ticketing, approval flows, CMDB updates, and change management processes. Build operational runbooks that map directly to ITSM workflows.

What We Are Looking For:

- 8+ years of hands-on infrastructure automation experience in enterprise environments.

- Expert-level Ansible engineering: advanced Jinja2 templating, dynamic inventory, custom module development.

- Strong Kubernetes and Helm expertise: chart authoring, multi-environment lifecycle management.

- Deep Terraform knowledge: reusable module design, remote state, CI/CD integration.

- Proficiency in Python, Bash, or PowerShell for automation scripting.

- Solid AWS architecture knowledge: serverless patterns, IAM design, multi-account networking.

Bonus Points:

- GitOps with ArgoCD or Flux.

- OPA / Gatekeeper / Conftest.

- Multi-account AWS automation Service mesh (Istio / Linkerd).

- IaC testing with Molecule, Terratest, Checkov, or tfsec.

- AWS cost optimization automation.

Why Join:

- Own automation end to end not just a piece of it.

- Replace reactive, manual operations with intelligent, self-healing systems.

- Work across cloud, security, infrastructure, and platform engineering.

- Build patterns and frameworks the entire engineering org will adopt.

- Directly reduce MTTR, improve security posture, and accelerate cloud maturity.

(ref:hirist.tech)