Cloud infrastructure Engineer - Terraform, Infrastructure

Job description

**About this role:** Wells Fargo is seeking a senior systems operations engineer, a highly skilled Container Engineer to join our EFT engineering team. This role is responsible for designing, building, securing, and maintaining containerized workloads at scale using Podman/Docker and Openshift/Kubernetes. You will play a critical role in ensuring reliability, performance, and security of our container platform in production environments. **In this role, you will:** - Lead or participate in managing all installed systems and infrastructure within the Systems Operations functional area - Contribute in increasing system efficiencies and lowering the human intervention time on related tasks - Review and analyze moderately complex operational support systems, application software, and system management tools to ensure the highest levels of systems and infrastructure availability - Work with vendors and other technical personnel for problem resolution - Lead team to meet technical deliverables while leveraging solid understanding of technical process controls or standards - Collaborate with vendors and other technical personnel to resolve technical issues and achieve highest levels of systems and infrastructure availability **Required Qualifications:** - 4+ years of Systems Engineering, Technology Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education **Desired Qualifications:** **Container Build Management** - Design, build, and optimize Docker images following best practices (multi-stage builds, minimal base images, etc.) - Maintain and version container images in enterprise registries - Ensure container portability across environments (dev, staging, production) **Kubernetes Operations** - Deploy, manage, and scale applications on Kubernetes (K8s) clusters - Implement and maintain Kubernetes resources (Deployments, StatefulSets, DaemonSets, Services, Ingress) - Monitor cluster health and troubleshoot production issues **Security Compliance** - Build secure container images by minimizing attack surface and removing vulnerabilities - Implement container security best practices: - Image scanning (e.g., Trivy, Anchore, Clair) - Runtime security - Least privilege (non-root containers, RBAC) - Enforce policies using tools such as Kyverno, OPA/Gatekeeper, or similar - Ensure compliance with organizational and industry security standards **CI/CD Automation** - Integrate container workflows into CI/CD pipelines - Automate image builds, testing, scanning, and deployment - Improve deployment speed and reliability through automation **Monitoring Reliability** - Monitor containerized applications using tools like Prometheus, Grafana, or ELK stack - Troubleshoot performance bottlenecks and production incidents - Ensure high availability and disaster recovery readiness **Job Expectations:** - 4+ years of experience in DevOps, SRE, or container engineering roles - Work closely with development, DevOps, and security teams - Provide guidance on container best practices and architecture - Participate in on-call rotations for production support - Strong hands-on experience with: - Docker (image creation, optimization, troubleshooting) - Kubernetes (cluster operations, workloads, networking) - Experience building and maintaining production-grade container platforms - Strong understanding of Linux, networking, and system fundamentals - Experience with container registries (ECR, ACR, GCR, or similar) - Experience securing containerized workloads - Knowledge of: - Container image scanning tools - Runtime security practices - Kubernetes RBAC and network policies - Familiarity with policy enforcement tools (e.g., Kyverno, OPA Gatekeeper) - Experience with Infrastructure as Code (Terraform, Bicep, etc.) - Familiarity with service mesh technologies (Istio, Linkerd) - Experience with GitOps workflows (ArgoCD, Flux) - Cloud platform experience (Azure, AWS, or GCP) - Certifications such as: - Certified Kubernetes Administrator (CKA) - Certified Kubernetes Security Specialist (CKS) - Certified Kubernetes Application Developer **Key Traits** - Production-first mindset with strong attention to reliability and uptime - Security-focused thinking in all engineering decisions - Strong troubleshooting and problem-solving skills - Ability to operate in fast-paced, high-scale environments **Success Criteria** - Secure, compliant container images with minimal vulnerabilities - Reliable Kubernetes workloads with high uptime - Efficient, automated CI/CD container workflows - Reduced incident frequency and faster recovery times