The Role You will be the founding infrastructure engineer. In the first 6–8 weeks, your job is to build TradeNexusIQ's production AWS infrastructure using Pulumi Neo (an AI infrastructure agent) and Gruntwork's enterprise-grade module library. After that, you will operate and evolve the infrastructure on a retainer basis as we grow. This is not a maintenance job. This is a build-from-scratch role on a modern, AI-assisted stack. If you enjoy greenfield infrastructure work with AI tooling doing the scaffolding and you want to do it as a specialist — not as a secondary responsibility — this role is for you. What You Will Build (Weeks 1–6) • AWS multi-AZ VPC, subnets, NAT gateways, and security groups via Pulumi Neo + Gruntwork • EKS Kubernetes cluster with auto-scaling, HPA, and cluster autoscaler • RDS PostgreSQL Multi-AZ (standard) or Aurora Global (enterprise) with automated backups and failover • ElastiCache Redis, Application Load Balancer, WAF Core Rule Set • Auth0 B2B SSO and MFA configuration • GitHub Actions CI/CD pipeline integrated with EKS • CloudWatch monitoring, PagerDuty alerting, and operational runbooks • Vanta SOC 2 compliance monitoring and initial control remediation What You Will Operate Ongoing • Monthly infrastructure drift checks, cost optimization reviews, and dependency updates • On-call escalation point for P1 infrastructure incidents (PagerDuty) • Security patch management and Vanta finding remediation • Infrastructure changes as the product scales — new services, additional capacity, enterprise upgrade