The Role
Designs and operates an Infrastructure-as-Code platform using Crossplane, Helm, Kubernetes, and GitOps. Builds reusable Crossplane compositions, resource definitions, configuration packages, and production Helm charts for self-service cloud provisioning. Integrates infrastructure validation, policy enforcement, testing, drift detection, and CI/CD workflows. Troubleshoots Kubernetes and infrastructure delivery issues, supports platform reliability and on-call operations, and creates documentation for internal engineering teams.
Summary Generated by Built In
Platform Infrastructure Engineer – Infrastructure-as-Code
Description:
As a Platform Infrastructure Engineer, you will be a crucial part of First Horizon's Infrastructure-as-Code team, building and operating the foundational infrastructure that powers the organization's developer and cloud experience. Your primary focus will be designing, implementing, and managing Infrastructure-as-Code to deliver self-service, declarative cloud resource provisioning through Kubernetes-native APIs. Leveraging senior-level Kubernetes expertise, you will define reusable infrastructure patterns, author declarative resource definitions, and build composable templates that enable development teams to provision and manage cloud resources consistently, securely, and at scale. You will collaborate closely with Architects and engineering teams to evolve the platform from manual and imperative workflows toward a fully GitOps-driven, policy-governed infrastructure model — ensuring reliability, repeatability, and compliance across all environments.
Responsibilities:
- Leverage Engineering background and skills as an Infrastructure-as-Code Platform Engineer
- Design, develop, and maintain declarative infrastructure patterns using Crossplane and Helm to enable self-service cloud resource provisioning.
- Build, test, and version reusable IaC components (Compositions, Helm charts, Configuration Packages) within a common infrastructure framework.
- Understands Semantic versioning and release management as applied to infrastructure artifacts and chart repositories.
- Complete understanding of Software Development Lifecycle as it applies to infrastructure code
- Experience with breaking down infrastructure components into modular, composable, and version-controlled resources.
- Extensive understanding of Git branching methodologies and their impact on infrastructure code promotion across environments.
- Infrastructure-as-Code with Crossplane & Helm
- Design and maintain Crossplane Compositions, CompositeResourceDefinitions (XRDs), and Claims to provision and manage cloud resources as Kubernetes-native APIs.
- Build and publish reusable Crossplane Configuration Packages for self-service infrastructure consumption by development teams.
- Configure and manage Crossplane Providers, handling credentials securely through Kubernetes Secrets or external secret stores.
- Develop, version, and maintain production-grade Helm charts for internal services, platform components, and third-party tooling.
- Manage Helm chart repositories (OCI registries) and implement chart testing pipelines using helm lint, helm unittest, and kubeconform.
- Build Helm templating patterns that support multi-environment, multi-cluster deployments with values overlays and library charts.
- Implement GitOps workflows (ArgoCD or Flux) for continuous deployment of both Helm releases and Crossplane claims.
- Migrate legacy IaC (e.g., Terraform/HCL) toward Crossplane-managed Kubernetes-native resource models where appropriate.
- CI/CD & DevOps Platform Fluency
- Maintain a strong working understanding of CI/CD platforms and DevOps toolchains to ensure IaC components integrate seamlessly into existing build, test, and deployment pipelines.
- Collaborate with DevOps teams to embed infrastructure validation, policy checks, and drift detection into pipeline stages.
- Troubleshoot issues end-to-end across the infrastructure delivery chain (source, build, package, deploy, and runtime) in coordination with DevOps engineering.
- Support and evolve the IaC platform by:
- Supporting the full infrastructure lifecycle ensuring highly scalable and reliable service.
- Unit and integration testing of new and proposed infrastructure changes.
- Identifying deficiencies and applying solutions to infrastructure patterns through IaC principles and framework.
- Utilizing monitoring and observability to both troubleshoot infrastructure drift and provide feedback into the infrastructure development lifecycle.
- Understanding and promoting infrastructure and application Security best practices.
- Participating in on-call to support the IaC platform and underlying infrastructure.
- Authoring support documentation, runbooks, and user guides for internal teams consuming IaC resources.
- Work closely with Architects and Leads to understand infrastructure requirements and align with product and technology vision.
- Continuously explore and stay current on new and emerging IaC technologies, Kubernetes ecosystem tooling, and cloud provider capabilities.
Required Knowledge and Experience:
- Minimum 10 years of experience as a DevOps or Systems Engineer or a bachelor's degree and 6 years of experience.
- Kubernetes (Senior-Level Expertise) -
- Deep understanding of cluster architecture: control plane, etcd, kubelet, kube-proxy, and API server internals
- Helm and Kustomize
- CRDs, services, operators
- Advanced RBAC design, NetworkPolicies, PodSecurityAdmission, and admission controllers
- Multi-cluster management strategies and federation patterns
- Resource scheduling, quotas, LimitRanges, priority classes, and pod disruption budgets
- Troubleshooting node-level, networking (CNI, DNS, Ingress), and storage (CSI, PV/PVC) issues
- Cluster lifecycle management: upgrades, node pool rotation, and disaster recovery
- Performance tuning: HPA, VPA, KEDA, and resource right-sizing
- Familiarity with Rancher management server is a plus.
- Infrastructure-as-Code (Crossplane & Helm) -
- Crossplane — Compositions, XRDs, Claims, Providers, and Composition Functions
- Upbound as a managed Crossplane platform — Upbound Spaces, managed control planes, and the Upbound Marketplace for Providers and Configurations
- Helm 3 — chart development from scratch, subcharts, library charts, values schema validation
- Experience managing Helm chart repositories (OCI registries)
- Understanding of Crossplane's continuous reconciliation model and drift detection
- Experience with GitOps tooling (ArgoCD or Flux) for deploying Helm releases and Crossplane resources
- Familiarity with Open Policy Agent (OPA), Gatekeeper, or Kyverno for IaC policy enforcement is a plus
- ArgoCD (Practitioner Usage) -
- Creating and managing Application resources and ApplicationSet resources
- Understanding of App of Apps pattern for organizing infrastructure deployments
- Configuring sync policies and sync waves for orchestrated rollouts
- Using Helm charts and Kustomize overlays as application sources
- Integrating ArgoCD applications with Git repositories for GitOps-driven delivery
- Monitoring application sync status, health checks, and troubleshooting failed syncs
- Understanding sync errors, drift detection, and manual vs. automated sync behavior
- Docker containers -
- dockerfile
- docker build, kaniko
- docker registry
- Source code management -
- Bitbucket (git)
- Github
- Git branching
- Code reviews and pull request approvals.
- Scripting Languages -
- bash
- python
- YAML
- Familiarity with PowerShell is a plus.
- Programming Languages -
- Go language
- Groovy
- YAML
- Ansible
- HCL - Terraform
- Crossplane Composition Functions (Go, Python, or KCL)
- Databases/Caches:
- MongoDB
- PostgreSQL
- Redis
- Azure SQL Server
- Productivity Tools
- Jira Software (scrum/Kanban Boards) or a similar ticketing system
- Confluence or a similar wiki tool
- Follow change control methodologies.
- Excellent communication skills and ability to collaborate with employees at all skill levels; including the ability to translate and communicate technical and analytical issues to all types of end users.
Top of Form
Bottom of Form
Skills Required
- At least 10 years of experience as a DevOps or Systems Engineer, or a bachelor's degree with at least 6 years of experience.
- Senior-level expertise with Kubernetes, including cluster architecture, control plane components, networking, storage, security, scheduling, upgrades, and disaster recovery.
- Experience with Helm and Kustomize.
- Experience designing Crossplane Compositions, CompositeResourceDefinitions, Claims, Providers, and Composition Functions.
- Experience with Upbound, including Spaces, managed control planes, and the Upbound Marketplace.
- Experience developing production-grade Helm charts, subcharts, library charts, values schemas, and multi-environment deployments.
- Experience managing Helm chart repositories and OCI registries.
- Experience implementing GitOps workflows with ArgoCD or Flux.
- ArgoCD practitioner experience with Applications, ApplicationSets, App of Apps, sync policies, sync waves, and troubleshooting.
- Experience with CI/CD platforms, infrastructure validation, policy checks, drift detection, and deployment pipelines.
- Experience with Docker, Dockerfiles, docker build, Kaniko, and container registries.
- Experience with Git, Bitbucket or GitHub, branching strategies, code reviews, and pull request approvals.
- Scripting experience with Bash and Python.
- Programming experience with Go, Groovy, YAML, Ansible, HCL/Terraform, or Crossplane Composition Functions.
- Experience with MongoDB, PostgreSQL, Redis, or Azure SQL Server.
- Strong communication and collaboration skills, including explaining technical issues to varied audiences.
- Familiarity with Rancher management server.
- Familiarity with Open Policy Agent, Gatekeeper, or Kyverno.
- Familiarity with PowerShell.
First Horizon Bank Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about First Horizon Bank and has not been reviewed or approved by First Horizon Bank.
-
Retirement Support — Retirement offerings include a 401(k) plan with company matching contributions up to 6% of pre-tax income, alongside FSA/HSA options and a defined benefit pension plan. Stock purchase and equity programs (including options and RSUs) also add to longer-term wealth-building opportunities for eligible employees.
-
Parental & Family Support — Parental leave is available for childbirth, adoption, foster parenting, or surrogacy, and adoption reimbursement is included in the package. These family-building benefits broaden support beyond traditional maternity/paternity leave structures.
-
Wellbeing & Lifestyle Benefits — Wellbeing support includes an internal wellness program, an employee assistance program, and access to a digital wellness platform. Group life insurance and disability coverage (including no-cost options) strengthen financial protection and day-to-day support.
First Horizon Bank Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
When we opened our doors in 1864 on North Court Street in Memphis, we had a simple mission: to provide the best service to our customers, one opportunity at a time. In the 150 years that followed, our communities transformed and expanded. We’ve seen our business and banking in general grow and adapt to the changing needs of customers through the years. But one thing that will always remain constant is our commitment to financial integrity and to helping our customers take good care of their money.
