Information Technology Infrastructure Engineer - Cloud SRE and Automation

Summary of Job Responsibilities

This position is responsible for making Infrastructure as Code (IaC) the way PERA builds and changes infrastructure. On-premises and AWS resources are defined in code, reviewed, and delivered through pipelines from GitHub Enterprise repositories. Assist and ensure GitHub Enterprise itself is implemented, secured, and managed so teams can provision infrastructure quickly, safely, and with a complete audit trail. You have working knowledge and experience with Terraform, Ansible, GitHub Actions, AWS, containerization, and Kubernetes. Be hands-on in creating IaC, modules, and runners, and creating appropriate documentation, controls, and procedures while following essential compliance and security requirements.

Essential Duties and Responsibilities

Employees are held accountable for all duties of the job. Individuals must be able to perform these duties with or without reasonable accommodations.

- Provision on-premises and AWS infrastructure through version-controlled Infrastructure as Code, with no manual, console or ad hoc changes

- Inventory existing manually built infrastructure and bring it under IaC based on priorities, starting with critical services

- Run scheduled drift detection and alert on, correct or codify out-of-band changes

- Maintain GitHub Enterprise repositories as the single source of truth, following a documented standard for structure, naming, ownership and CODEOWNERS

- Enforce repository rulesets for pull requests, required reviews, required status checks and signed commits on protected branches

- Deliver infrastructure changes to production only through pipelines (plan on pull request, approval, then apply on merge) with environment protection rules, and ensure every change is traceable to a pull request, an approver and a ServiceNow change record

- Implement, secure and manage the GitHub Enterprise as a platform, including enterprise, organization and team structure, work with Enterprise Application team for provisioning with the corporate identity provider, and least privilege policies, roles and permissions managed as code

- Stream audit logs to PERAs logging and security tools and review them regularly

- Secure pipelines and repositories by default: work with Enterprise Application team to authenticate pipelines, keep long-lived keys out of repositories, and enable secret scanning with push protection, code scanning and dependency scanning on all IaC repositories

- Maintain and publish a catalog of versioned IaC modules, pipeline templates, repository templates and reference architectures, and enable self-service provisioning so teams can deploy approved infrastructure in minutes or hours

- Train and support teams on IaC, Git workflows and GitHub, and keep onboarding guides current

- Keep the platform current by running Terraform, provider, module, runner and GitHub configuration upgrades on a predictable schedule

- Back up Terraform state and GitHub repositories, and test recovery against agreed recovery time and recovery point objectives

- Integrate the platform with ServiceNow for requests, changes and incidents, and provide tier-2/3 support to application teams for IaC and pipeline issues

- Perform other duties as assigned

Job Qualifications

- Degree in technical (STEM) field and four years experience in technical role preferred or equivalent combination of education and experience

- AWS Practitioner/Associate and GitHub Enterprise certifications preferred

- Experience as an SME within multiple key technologies/platforms within the assigned technology domain with a solid understanding of system security implications

- In-depth experience with Infrastructure as Code, including Terraform (reusable modules, remote state with locking, environment layering, import and refactoring of existing resources, testing, versioning and a private module registry)

- Experience with configuration management and image building, including Ansible roles, collections, inventories and automation controller (AWX or Ansible Automation Platform), and Packer, or similar

- Experience administering GitHub Enterprise, including enterprise, organization and team structure, enterprise policies, roles and custom repository roles, least-privilege access

- Experience managing GitHub as code using the Terraform GitHub provider, the GitHub API and the GitHub CLI

- Experience with GitHub Actions for infrastructure delivery, including reusable workflows, composite actions, plan-on-pull-request and apply-on-merge pipelines, environment protection rules, secrets and variables management, and action allow-listing and version pinning

- Experience with GitHub security features (GitHub Advanced Security, code scanning, secret scanning with push protection, Dependabot, dependency review) and software supply chain controls

- Experience with policy as code and IaC testing, such as OPA/Conftest, Checkov or similar scanners, tflint, pre-commit hooks, and AWS service control policies

- Experience with secrets management using AWS Secrets Manager or HashiCorp Vault, including secret injection into pipelines and secret rotation in cooperation with Enterprise Applications and Security teams

- Experience with container and Kubernetes platforms, including managed containers (ECS) and Kubernetes (EKS), cluster lifecycle and upgrades, Helm, and GitOps deployment (Argo CD or Flux)

- Experience with self-service and developer enablement, including golden paths, repository and service templates, a catalog of versioned modules, and an internal developer portal

- Experience with scripting and automation in Python, PowerShell and Bash, Git (branching strategies, rebase, conflict resolution), and cloud and GitHub APIs and SDKs

- Hybrid infrastructure fluency, with the ability to integrate on-premises systems alongside AWS and Kubernetes

- Strong collaboration, communication and documentation skills, including code review, change management, documentation as code, cross-team collaboration, and coaching teams on IaC, Git workflows and GitHub use

Working Conditions

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

- Standard office environment with frequent telephone communication, computer operation, and other office productivity machinery, such as a copy and printer machine.

- Occasional moving and positioning supplies in excess of 20 pounds

- All employees are expected to present themselves in a professional manner in alignment with the financial services industry

- Ability to sit for prolonged periods of time

- Ability to operate standard PC equipment

- Ability to manage frequent deadlines and tight schedules

Hybrid Work Option

- Opportunity to work from home up to three days per week. Eligibility dependent upon factors detailed in PERA's Work from Home Policy.

Qualifications

Interested Candidates:
Complete the employment application online at https://www.copera.org/careers . Please have copies of your resume and cover letter available to upload.

Job Description Disclaimer

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of an employee. Duties, responsibilities, and activities may change or be assigned with or without notice.

Unfortunately, at this time, PERA cannot consider candidates that require sponsorship (now or in the future), or are located outside of the US.

All Colorado PERA employees are subject to PERAs Ethics Policy and some employees are subject to the Personal Trading Policy. These policies include restrictions on outside business activities and employment and have certain requirements on personal trading. You may request copies of these policies from PERAs talent acquisition team and any questions can be answered by PERAs Investment Administration team.

Why Work at PERA

Colorado PERA offers more than a traditional pension career. We are a mission-driven organization with a growing focus on technology and modernization. Employees have the opportunity to do meaningful work with a real impact on over 700,000 members. From enhancing digital tools and member experiences to supporting major enterprise initiatives, employees are part of meaningful, future-focused work that blends public service with innovation. We take pride in our inclusive culture, career development opportunities, and our consistent recognition as a Top Workplace based on employee feedback. PERA is a place to connect, contribute, and be part of something bigger.

A Culture That Cares

At PERA, leveraging employee strengths and supporting strong engagement are the foundations of our culture. Employees are encouraged to grow through development opportunities and internal career movement, while also being part of an organization where people feel respected, informed, and included. Collaboration is encouraged across teams, allowing employees to learn from one another and contribute in ways that maximize their unique skills. We strive to foster an environment where employees can do their best work and feel supported by the people around them

An Employer that Invests in You

PERA invests in our employees in ways that matter; from comprehensive benefits and generous paid time-off to thoughtful everyday amenities that enhance the office experience. Employees are encouraged to continue learning through training, mentoring, and development at every stage of their careers. We champion a workplace where people feel valued, inspired, and equipped to grow.

Join Us
If youre energized by meaningful work, motivated by an organization that evolves with a changing world and looking for an employer that invests in you, then consider joining PERAs team. Learn more about careers at PERA at copera.org/careers .

Position Title: Infrastructure Engineer – Cloud SRE and Automation
Division: Information Technology
Reports to: Infrastructure Manager
Job Status: Full-time, Exempt
Salary: $108,000.00 to $130,000.00 Annual, commensurate with experience
Posting Dates: 11/13/2026 to 11/29/2026