Manager, Cloud Automation Engineering

Together we fight for everyone’s opportunity for a better financial future. We will do this together — with customers, partners and colleagues. We will fight for others, not against: We will stand up for and champion everyone’s access to opportunities. The status quo is not good enough … we believe every individual and every community deserves access to financial opportunities. We are determined to support both individuals and communities in reaching a better financial future.  We know that reaching this future depends on our actions today. Like our Purpose Statement, Voya believes in being bold and committed to action.  We are committed to a work environment where the differences that we are born with — and those we acquire throughout our lives — are understood, valued and intentionally pursued. We believe that our employees own our culture and have a responsibility to foster an environment where we all feel comfortable bringing our whole selves to work. Purposefully bringing our differences together to positively influence our culture, serve our clients and enrich our communities is essential to our vision. Are you ready to join a company with a strong purpose and a winning culture? Start your Voyage – Apply Now Manager, Cloud Automation Engineering Role Overview Voya's Infrastructure Engineering organization is modernizing how cloud infrastructure gets built, changed, and governed across Azure, AWS, and OCI. Terraform and Ansible/AAP automation already run production workloads today — VM lifecycle and disaster-recovery failover, capacity management, and GitOps-driven application delivery — but much of that automation grew organically, without the version control, peer review, and audit trail that a regulated financial services environment requires. This role owns closing that gap: replacing ungoverned, direct-to-production automation patterns with a secure, auditable, and genuinely usable cloud automation platform. Get to Know the Opportunity As Manager, Cloud Automation Engineering, you are a builder-operator hybrid: hands-on architect and contributor to the pipelines and platforms your team runs, and the people leader accountable for their delivery and growth. You will personally design and help build the CI/CD architecture for Terraform, Ansible/AAP, and GitOps (ArgoCD) — version-pinned artifact promotion, policy-as-code gates, and DTAP segregation — while also running forensic audits of the current estate to quantify risk and build the evidence base for remediation. You'll partner directly with security, compliance, and audit stakeholders to map every pipeline gate to a named control (SDLC-2, CP-054, CP-064, ITAM-3, SOC-12, Source Code Protection Standard), and you'll lead and grow a team of cloud/platform engineers who share that same builder mindset. The Contributions You'll Make Cloud Automation Architecture & Engineering Architect and personally build the Terraform (anchored on the shared-module repo) and Ansible/AAP pipelines spanning Azure, AWS, and OCI, replacing live branch-sync and direct-apply patterns with version-pinned, gated promotion. Design and implement GitOps delivery via ArgoCD/OpenShift GitOps, moving self-syncing application patterns onto a discrete build-and-gate stage. Define reference architectures, module/role standards, and reusable shared-module conventions — CI, CODEOWNERS, branch protection, semantic version tagging — enforced across every consumer repository. SDLC Pipeline & Compliance Engineering Own end-to-end remediation of the Terraform uplift and Ansible greenfield rebuild: committer-limit enforcement, branch protection and peer review, version-pinned promotion across Dev/Test/Acceptance/Prod, and independent release-owner approval gates ahead of production. Build and mature the security tooling stack: static analysis and policy-as-code for Terraform (linting, cloud-config scanning, OPA) and for Ansible (lint, Molecule, container/CVE scanning), plus