Senior Terraform Engineer – Release Engineering Rollout

NexGen Media

Project-based · Remote · Flexible hours

About the role

NexGen Media is launching a security hardening initiative for its suite of cloud‑hosted applications. We need a Terraform Engineer to design, implement, and validate infrastructure‑as‑code controls that raise our security posture while keeping deployment pipelines fluid.

Key responsibilities

• Develop Terraform modules that enforce least‑privilege IAM, encryption, and network segmentation.
• Integrate security checks into existing CI/CD pipelines using tools like Checkov or Sentinel.
• Collaborate with cloud architects to map current workloads to hardened configurations.
• Perform automated compliance testing and generate audit reports.
• Document module usage and hand‑off procedures for the ops team.

Must-have skills

• Proven experience writing production‑grade Terraform code on AWS.
• Deep understanding of cloud security best practices (IAM, KMS, VPC, security groups).
• Hands‑on CI/CD pipeline development (GitHub Actions, Jenkins, or similar).
• Ability to troubleshoot IaC failures and optimize plan/apply cycles.

Nice to have

• Familiarity with AWS Security Hub, GuardDuty, or Config.
• Experience with policy‑as‑code frameworks.
• Knowledge of container orchestration security (EKS, ECS).