IT Engineer

Location: 7700 Mills Civic Parkway, West Des Moines, IA 50266
Duration: 4 months
Pay Rate Range: $65 to $75 per hour

Responsibilities

• Translate container build-and-publish workflows from Azure Container Registry (ACR) to Amazon Elastic Container Registry (ECR) and GitHub Container Registry (GHCR) / GitHub Packages, as applicable.
• Re-target deployment skills from Azure Kubernetes Service (AKS) to Amazon ECS on Fargate, including:
  • Task definitions
  • Services
  • IAM task roles
  • Container networking
  • CloudWatch logging
  • Load balancing and service wiring
  • Deployment validation
• Leverage existing GitHub Actions pipelines for deployment workflows.
• Replace Azure identity constructs, including Managed Identities and federated credentials, with:
  • AWS IAM roles
  • Okta groups
  • OIDC-based federation
• Replace Azure Key Vault secret retrieval with AWS Secrets Manager and SSM Parameter Store.
• Convert Infrastructure-as-Code from the Azure provider to the AWS provider, including remote state and supporting modules.
• Re-point GitHub Actions pipelines, runners, reusable workflows, and OIDC trust to Athene’s GitHub organization and AWS accounts.
• Build GitHub Actions pipelines required to deploy into the Amazon ECS on Fargate environment used by the Claude skills.
• Create working, reusable deployment workflows that the skills can invoke.
• Adapt skill instructions and helper scripts to run reliably inside Coder workspaces, including:
  • Workspace assumptions
  • Environment variables
  • Credentials
  • CLI tooling
  • Developer workflow expectations
• Instrument the software developer toolchain, including Claude Code and the skill library, on the Ubuntu-based Coder workspace EC2 AMI.
• Ensure tools and skills are pre-installed, configured, and validated in the golden image developers launch.
• Use Claude Code to accelerate implementation while independently reviewing, testing, and validating all AI-assisted changes.
• Evaluate AWS Blocks as an alternative to manually porting portions of the infrastructure and deployment skills.
• Pilot an AWS Blocks-based deployment skill for suitable TypeScript/Node workloads.
• Recommend where AWS Blocks can reduce the number of skills requiring conversion.
• Author and execute validation evidence for each ported skill using the repository’s existing evaluation harness.
• Produce a concise handover guide for Athene engineers.

Requirements

• Senior-level AWS Platform Engineering experience with:
  • IAM roles and policies
  • OIDC federation
  • ECR
  • ECS/Fargate
  • Secrets Manager
  • SSM Parameter Store
  • S3
  • VPC networking
  • CloudWatch
• Working knowledge of Amazon ECS on Fargate, including:
  • Deploying and running containers
  • Task definitions
  • Services
  • Networking
  • IAM task roles
  • CloudWatch logging
  • ALB/service discovery patterns
  • Deployment troubleshooting

  Deep day-to-day ECS/Fargate operations expertise is not required; a solid understanding of the fundamentals is sufficient.

• Strong Infrastructure-as-Code skills using Terraform, including:
  • Provider migration
  • Module authoring
  • Remote-state backends
• Hands-on CI/CD experience with GitHub Actions, including:
  • Reusable workflows
  • Environments
  • OIDC to AWS
  • Container build-and-publish pipelines
  • Deployment pipelines targeting Amazon ECS on Fargate
• Proficiency in Bash and Python scripting.
• Comfortable reading and modifying automation-oriented repositories containing:
  • Skill/playbook instructions
  • Shell scripts
  • Python utilities
  • Terraform modules
  • GitHub Actions workflows
  • Markdown-based technical documentation
• Azure literacy at a reading level, with the ability to interpret existing:
  • ACR
  • AKS
  • Key Vault
  • Managed Identity
  • Azure DevOps configurations
• Strong Docker fundamentals.
• Strong Git / GitHub Enterprise fundamentals.

Pay

$65 to $75 per hour

Schedule

4 months