DevSecOps Engineer

The AWS DevOps / DevSecOps Engineer will be responsible for designing, implementing, securing, and maintaining AWS-based infrastructure and deployment pipelines. The role requires strong hands-on experience with AWS services, infrastructure as code, CI/CD automation, container platforms, security scanning, vulnerability remediation, backup/DR, monitoring, and cloud security best practices. We are not looking for a generic cloud administrator. We are looking for someone who can actively improve AWS environments through automation, security hardening, reliable deployments, and operational excellence.

Responsibilities:

• Design, build, and maintain AWS cloud infrastructure using best practices.
• Create and manage Infrastructure as Code using Terraform and/or CloudFormation.
• Build, enhance, and maintain CI/CD pipelines using tools such as Jenkins, GitHub Actions, GitLab CI, AWS CodePipeline, or similar.
• Support containerised workloads using Docker and Kubernetes/EKS.
• Implement DevSecOps practices across build, deployment, and infrastructure workflows.
• Perform vulnerability analysis and remediation for AWS resources, EC2 instances, containers, dependencies, and infrastructure configurations.
• Integrate and manage security scanning tools such as SAST, DAST, container scanning, and IaC scanning tools.
• Work with tools such as SonarQube, Trivy, Checkov, OWASP ZAP, Snyk, Prisma Cloud, Wiz, or similar.
• Configure and manage AWS security services such as IAM, Security Hub, GuardDuty, Inspector, Config, CloudTrail, KMS, WAF, and Secrets Manager.
• Support patching, hardening, backup, disaster recovery, monitoring, logging, and alerting.
• Build automation scripts using Python, Bash, PowerShell, or similar scripting languages.
• Monitor system performance, troubleshoot infrastructure issues, and support production incidents.
• Document infrastructure, deployment steps, security findings, remediation actions, and operational procedures.
• Collaborate with application developers, data engineers, security teams, and client stakeholders.

Requirements:

• Strong hands-on experience with AWS cloud services.
• Experience with Terraform and/or CloudFormation.
• Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, AWS CodePipeline, or Azure DevOps.
• Good understanding of Docker and Kubernetes/EKS.
• Experience with Linux systems, shell scripting, networking, IAM, and cloud security fundamentals.
• Experience with vulnerability remediation and cloud security hardening.
• Familiarity with DevSecOps tools such as SonarQube, Trivy, Checkov, OWASP ZAP, Snyk, or similar.
• Experience with monitoring and logging tools such as CloudWatch, Prometheus, Grafana, ELK, Datadog, or similar.
• Understanding of backup, disaster recovery, high availability, and incident response practices.
• Strong troubleshooting, documentation, and communication skills.

Good to Have:

• AWS certification such as AWS Solutions Architect, AWS SysOps Administrator, AWS DevOps Engineer, or AWS Security Speciality.
• Experience with AWS Organisations, Control Tower, multi-account setup, landing zones, or governance.
• Experience with SOC 2 ISO 27001 HIPAA, PCI, or other security/compliance frameworks.
• Experience with ECR, ECS, Lambda, Step Functions, API Gateway, RDS, DynamoDB, S3 VPC, Route 53 and Load Balancers.
• Experience with backup and DR tools such as AWS Backup, snapshots, cross-region replication, and recovery testing.
• Experience supporting client-facing consulting engagements.
• Exposure to data engineering or serverless workloads is a plus.