AWS Cloud / DevOps Engineer (IaC, ECS Fargate & Observability)

We are seeking an AWS Cloud / DevOps Engineer to build and run the platform for an email gateway that runs across multiple availability zones. It sits behind an edge CDN/WAF and uses API Gateway, private networking and containers on ECS Fargate. The engineer will:
- build the dev, test and prod environments entirely through infrastructure-as-code
- set up CI/CD pipelines with security scanning, contract tests and staged releases
- own identity, encryption, secret rotation, monitoring, alerting, and autoscaling sized for peak volumes
The engineer will follow the clients existing platform standards and work with security and network teams on reviews and approvals. The role also leads technical decisions on the DevOps track, mentors engineers, and writes the runbooks the support team will use after go-live.

Required Skills & Competencies
- Strong Hands-on AWS cloud/DevOps engineering with ECS Fargate, containerisation, API Gateway, VPC networking, private connectivity, load balancing and DNS/TLS.
- Infrastructure as code with Terraform or AWS CDK, Git-based reviews and automated environment provisioning.
- CI/CD for Node.js / TypeScript services, security scanning, controlled releases and rollback.
- AWS IAM, KMS, Secrets Manager, DynamoDB, SQS/DLQ, configuration management and operational recovery.
- CloudWatch, CloudTrail and distributed tracing using ADOT/OpenTelemetry or X-Ray; experience implementing actionable alerts and operational dashboards.
- Hands-on use of AI coding tools for infrastructure or pipeline development with validation, least-privilege review and protection of sensitive configuration.


Good-to-Have
- Akamai WAF, Cognito M2M, AppConfig and OpenSearch/ELK; retail peak-traffic readiness.
- AWS DevOps Engineer - Professional or SysOps certification

Qualifications
- 7-10 years of relevant cloud/DevOps engineering experience, including technical ownership of AWS deployments.
- B.E./B.Tech/MCA or equivalent

Infrastructure
- Provision API Gateway, VPC Link, internal ALB, ECS Fargate, DynamoDB, SQS, EventBridge, AppConfig and S3 using Terraform or AWS CDK
- Configure Route 53 domains, certificates and edge integration
- Set up multi-AZ autoscaling and warm capacity for peak traffic
- Configure VPC endpoints for AWS services and controlled egress to the email provider API

CI/CD & Security
- Build pipelines with SAST, dependency and image scanning, automated tests and staged releases
- Implement Cognito machine-to-machine authentication, least-privilege IAM, KMS encryption and secret rotation
- Apply FinOps tagging across all resources

Observability & Operations
- Build CloudWatch dashboards and alarms for latency, errors and DLQ depth
- Enable tracing with ADOT/X-Ray and account auditing with CloudTrail
- Write runbooks for email provider outages, DLQ replay, configuration rollback and credential rotation

Leadership
- Lead the DevOps workstream and agree platform decisions with client teams
- Mentor engineers on IaC, pipeline and security best practices