DevSecOps Engineer

We are seeking a highly skilled to design, build, and maintain cloud-native environments on AWS. This role will lead the engineering of , , and , while embedding security and operational excellence into every stage of the delivery lifecycle (infrastructure, pipelines, runtime, and monitoring). You will partner closely with application engineers (frontend and backend), architects, and security stakeholders to deliver with strong reliability, performance, and governance.

• Design and implement on AWS, emphasizing patterns where appropriate.
• Build and maintain using , and related integration patterns (authorizers, throttling, request validation, WAF integration as needed).
• Create and orchestration using , including retries, error handling, idempotency, and observability.
• Design and maintain using and , including task definitions, scaling, service discovery, and secure networking.

• Develop and manage infrastructure using (and/or complementary IaC practices as applicable), ensuring reusability, composability, and environment parity (dev/test/prod).
• Implement guardrails for consistent provisioning: tagging standards, baseline security controls, secrets handling, and standardized logging/monitoring.
• Manage , endpoints, and connectivity patterns for secure, least-privilege architectures.

• Build and maintain for automated testing, security checks, deployments, and rollbacks across multiple environments.
• Automate release workflows for serverless and container platforms (blue/green or canary strategies where applicable).
• Implement pipeline-integrated security controls (e.g., dependency scanning, container scanning, IaC scanning, policy-as-code where applicable) and ensure audit-ready traceability.

• Architect secure AWS environments leveraging (least privilege, role-based access, permission boundaries where useful), (KMS), and secure secrets management.
• Implement logging and detection best practices using services such as , , and centralized log aggregation patterns.
• Ensure secure configuration and operational readiness: patching/immutability strategies, secure image practices, runtime hardening, and incident response readiness.

• Design and maintain environments, including backups, parameter tuning, maintenance windows, read replicas (if needed), and secure connectivity.
• Support application teams with data-access patterns, migrations, and reliability considerations (connection management for serverless, pooling/proxy patterns where applicable).

• Hands-on expertise building serverless solutions with , , and in production.
• Strong experience with for provisioning and managing environments.
• Strong CI/CD experience, specifically building and operating .
• Strong container expertise with and running workloads on (services, tasks, scaling, networking).
• Demonstrated experience architecting secure AWS environments using , , , and best practices.
• Experience designing/operating in production.
• Strong scripting/automation skills (e.g., Python and/or Bash) to streamline workflows and reduce toil.
• Ability to collaborate effectively with frontend/backend engineering teams and translate requirements into secure, automated platform capabilities.
• Security+ or higher certification
• AWS Cloud Practitioner certification or higher
• TS security clearance or the ability to obtain one

• Familiarity with or Terraform (even if CloudFormation remains primary).
• Experience with API security patterns: OAuth/OIDC integration, JWT authorizers, rate limiting/throttling, WAF, mTLS (where required).
• Experience with secrets management (e.g., / ) and key management ().
• Observability stack experience beyond basics: structured logging, tracing (e.g., X-Ray/OpenTelemetry patterns), metrics-driven alerting.
• Experience implementing and governance (e.g., SCPs/Organizations, config rules, control frameworks).
• Experience with performance/cost optimization for serverless and Fargate workloads.
• Prior experience in regulated environments requiring audit evidence and secure SDLC controls.

• security and automation as first-class design principles.
• understands tradeoffs across reliability, latency, cost, and security.
• version control, reviews, testing, change management, and documentation.
• can carry systems from build → run with strong on-call hygiene.
• able to explain architecture decisions to technical and non-technical stakeholders.