Site Reliability Engineer Lead

Job Title: Site Reliability Engineer Lead Job ID: 26-02197 Location: Grand Rapids, MI Duration: Through end of the 2026

TECHNICAL SKILLS

Must Have

• AWS Cloud Expertise
• GitHub & CI/CD
• Operational & Collaboration Skills
• Rundeck (Operational Automation)
• Security & Compliance
• Spacelift (Terraform Orchestration)
• Terraform experience in production AWS environments.

• Experience migrating teams into centralized IaC or platform tooling.
• FinOps experience (cost tagging, chargeback/showback)
• Policy-as-code exposure (OPA, Sentinel, or equivalent)
• Terraform tooling: tflint, checkov, tfsec, infracost

• Design, build, and maintain Terraform modules and IaC patterns used by multiple delivery teams.
• Implement and operate Terraform deployments via Spacelift, including stack design, approvals, drift detection, and environment promotion.
• Develop and maintain Rundeck jobs for AWS operational automation, breakglass actions, and platform support workflows.
• Build and support GitHubbased CI/CD pipelines using GitOps principles (PRdriven change control).
• Establish and enforce AWS standards for:
• Account structure and environments
• Tagging, cost allocation, and ownership
• Security, access control, and auditability
• Implement secure automation using IAM roles, OIDC, and leastprivilege access.
• Collaborate with application and platform teams to onboard workloads to standardized IaC tooling.
• Produce and maintain documentation, runbooks, and onboarding guides.
• Troubleshoot IaC, pipeline, and automation failures; participate in root cause analysis as needed.

• 5+ years of handson Terraform experience in production AWS environments.
• Advanced experience with:
• Module design, reuse, and versioning
• Remote state using S3 and DynamoDB
• Multiaccount and multienvironment deployments
• Standards enforcement via validation and lifecycle rules
• Experience supporting centralized Terraform modules consumed by many teams.

• Strong, practical experience with:
• AWS Organizations, SCPs, and multiaccount strategies
• Crossaccount IAM role design
• Account bootstrap / landing zone concepts
• Handson experience provisioning AWS services via Terraform, including:
• IAM
• VPC and networking
• EC2 / Auto Scaling
• EKS or ECS (working knowledge)
• S3, RDS
• CloudWatch and logging
• KMS and encryption

• Production experience using Spacelift for Terraform:
• Stack and dependency design
• Environment promotion and approvals
• Worker configuration (private or AWShosted preferred)
• Drift detection and scheduled runs
• Experience integrating Spacelift with AWS IAM and GitHub workflows.

• Experience designing and operating Rundeck jobs for AWS infrastructure operations.
• Strong understanding of:
• Job security, RBAC, and approvals
• Credential management using IAM roles (no static keys)
• Error handling, retries, and notifications
• Familiarity with jobascode or versioncontrolled job patterns.

• Enterprise GitHub experience, including:
• Branch protection rules and CODEOWNERS
• Required reviews and PRbased change control
• GitHub Actions for CI/CD
• OIDCbased authentication to AWS
• Strong understanding of GitOps delivery models.

• Experience implementing:
• Leastprivilege IAM and permission boundaries
• Secure secrets handling (no credentials in code)
• Approval workflows and separation of duties
• Ability to embed security and compliance into IaC pipelines rather than manual processes.
• Experience in regulated or risksensitive environments strongly preferred.

• Strong troubleshooting and operational mindset.
• Experience supporting shared platforms used by many teams.
• Ability to document solutions clearly and enable team adoption.
• Strong communication skills and comfort working with crossfunctional stakeholders.