AWS DevOps/Security Engineer Senior/Architect

Accountabilities: In this role, you will lead the design, implementation, security, and operational management of AWS infrastructure while ensuring high availability, scalability, and compliance across enterprise environments. Your responsibilities will include: Design, build, and operate AWS environments across development, testing, user acceptance testing (UAT), production, and disaster recovery (DR) stages. Manage AWS accounts, service quotas, resource governance, tagging strategies, cost controls, and environment readiness. Design and implement private VPC and spoke architectures, including subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity. Coordinate integrations between AWS infrastructure and corporate networks, firewalls, Netskope, on-premises systems, and shared cloud networking services. Build, configure, and maintain AWS services, including EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, and Systems Manager. Design and manage IAM roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access. Implement security controls covering KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and regulatory compliance. Develop infrastructure automation using Terraform, AWS CloudFormation, AWS CLI, Python, PowerShell, and Bash. Build and maintain GitHub-based CI/CD pipelines for infrastructure provisioning and application deployments. Implement automated validation, security scanning, policy checks, approval workflows, release controls, and rollback procedures. Establish centralized monitoring and observability using CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alerts, and operational dashboards. Support AWS MWAA/Airflow environments, RDS PostgreSQL, S3 landing zones, bastion services, and private application access. Troubleshoot complex infrastructure and application issues involving IAM, KMS, DNS, routing, firewalls, endpoints, Linux, EC2, databases, and managed AWS services. Conduct architecture reviews, cost optimization initiatives, capacity planning, disaster recovery assessments, and production-readiness evaluations. Develop and maintain architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation. Participate in production support, incident response, root-cause analysis, and continuous service improvement initiatives. Requirements The ideal candidate combines extensive AWS engineering expertise with strong cloud security, automation, and production operations capabilities. You should demonstrate: 8+ years of hands-on experience in AWS cloud engineering, DevOps, platform engineering, or cloud security. Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity. Experience designing and operating private, regulated, or enterprise-scale AWS environments. Advanced infrastructure-as-code expertise, particularly with Terraform; experience with CloudFormation or AWS CDK is also beneficial. Hands-on experience building and maintaining CI/CD pipelines using GitHub Actions or comparable platforms. Proficiency in AWS CLI, Linux administration, and scripting languages such as Python, PowerShell, and Bash. Strong understanding of identity federation, SAML/OIDC, secrets management, digital certificates, encryption, and least-privilege access principles. Proven ability to troubleshoot complex technical issues across cloud infrastructure, networking, security, application environments, and on-premises systems. Experience with cloud monitoring, incident response, change management, and production operations. Strong analytical and problem-solving skills, with the ability to manage complex technical challenges independently. Excellent documentation and communication skills, particularly when working across technical teams and enterprise stakeholders. Preferred Qualifications: AWS certifications such as Solutions Architect, DevOps Engineer, Security Specialty, or Advanced Networking. Experience with AWS MWAA, Apache Airflow, Cognito, RDS PostgreSQL, AWS Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS. Previous experience supporting healthcare, government, or other highly regulated workloads. Benefits Opportunity to work on large-scale AWS modernization and data migration programs. Exposure to advanced cloud infrastructure, security, automation, and DevOps technologies. Opportunity to design and influence enterprise-level cloud architecture. Collaborative and inclusive working environment that values diversity, equity, and innovation. Opportunity to contribute to secure and reliable digital solutions with meaningful business and societal impact.