About REEF REEF’s mission is to connect the world to your block. We transform underutilized urban spaces into neighborhood hubs that connect people to locally curated goods, services, and experiences. Together we are leveraging the power of proximity to keep our communities moving forward in a sustainable and thoughtful way. We operate in a fast-paced, constantly evolving, startup-style environment across North America, the UK, and Europe. About the Project We are looking for a skilled engineer to take ownership of REEF OS martketplace infrastructure. Our infrastructure is built on AWS and managed through Terraform (IaC). The system is designed to support multiple isolated environments (Production, Staging, Testing) across separate AWS accounts, interconnected via a central management account. It leverages a modular architecture to ensure consistency, scalability, and security. What you'll own Maintain, refactor, and extend our Terraform codebase. You will work with modules, workspaces, and state management to provision resources like VPCs, EC2 instances, RDS databases, and ALBs. Manage a multi-account AWS strategy, including a central "Master" account for shared services (Vault, Monitoring) and satellite accounts for specific applications. Oversee the integration of HashiCorp Vault for secrets management (KV secrets, database credentials) and manage IAM roles/policies to ensure least-privilege access. Improve developer workflows using Makefiles, Shell scripts, and Python automation (e.g., certificate renewal). Maintain and enhance our monitoring stack, primarily based on NewRelic, Zabbix, and Sentry ensuring high availability and proactive alerting. Collaborate with development teams to ensure smooth deployment pipelines through GitHub actions, where code pushes automatically trigger infrastructure updates or application deployments. Prioritize documentation and standardized processes to keep the infrastructure predictable and reliable. You’ll be successful here if you have Deep understanding of Terraform, including custom modules, state locking, workspaces, and best practices for production environments. Strong hands-on experience with core AWS services: Networking: VPC, Subnets, NAT Gateways, Route53 (Internal/External DNS), VPNs. Compute: EC2, Auto Scaling Groups, ALBs. Storage/Database: RDS, Aurora, S3. Security & Access Control: Security Groups, NACLs, IAM roles/policies, Secrets Manager. Proficiency in Bash and Python for glue code and automation tasks. Experience with Makefiles is a plus. Experience with HashiCorp Vault, SSH certificate management, and AWS IAM. Comfortable managing Bastion hosts and debugging Linux-based systems. Git-based reviews, documentation-first mindset, ability to partner with app teams on database migrations, secrets, and release hygiene. What we value You take pride in your work and own the lifecycle of a feature from design to deployment. You enjoy tackling complex architectural challenges in a distributed system. You write readable, maintainable, and well-documented code. You use AI to move faster, never at the cost of quality. Short iterations, small PRs, and frequent deployments. What we require This is a full-time position based on a 40-hour work week, with flexibility to accommodate the company’s operational needs. Annual PTO will align with local regulations in your region. We are seeking individuals who are comfortable traveling to support our global operations when required. In return, we offer a dynamic, fast-paced work environment, opportunities for professional growth, and a benefits package including medical and other location-specific benefits based on your home location.