Cloud Security Operations (Overnight)

After-Hours DevSecOps Engineer – AWS Cloud Platform
Position Summary
The After-Hours DevSecOps Engineer supports secure, reliable operations for the organization’s AWS cloud platform outside normal business hours. This role combines cloud operations, deployment support, security automation, monitoring, and incident triage to ensure production services remain available, compliant, and resilient during evening, overnight, weekend, and holiday coverage windows.
Key duties:
Deployments: Execute and validate after-hours releases via CI/CD, coordinate with stakeholders, and handle rollbacks when issues arise.
Monitoring: Track AWS platform health and security events (CloudWatch, GuardDuty, Security Hub, SIEM) and troubleshoot infrastructure issues.
Incident Response: Serve as first responder to production/security incidents — triage, contain, communicate, and document.
DevSecOps: Maintain secure CI/CD pipelines, support IaC (Terraform/CloudFormation), and enforce least-privilege security standards.
Required Qualifications
· 5+ years of hands-on experience supporting production workloads in AWS, including core services such as EC2, VPC, IAM, S3, RDS, Lambda, ECS, EKS, CloudWatch, CloudTrail, and AWS Config.
· 5+ years of experience with DevOps or DevSecOps practices, including CI/CD pipeline support, release validation, deployment troubleshooting, and automation.
· Working knowledge of cloud security principles, identity and access management, vulnerability management, logging, monitoring, and incident response.
· Ability to triage technical issues under time-sensitive conditions and communicate clearly with cross-functional teams during incidents.
· Experience with scripting or automation using Python, Bash, PowerShell, or similar languages.
· Familiarity with ticketing, change management, incident management, and documentation practices such as ITIL-aligned processes.
· Ability to work independently during after-hours coverage windows while following approved escalation and communication procedures.
Preferred Qualifications
· AWS certification such as AWS Certified Solutions Architect, AWS Certified SysOps Administrator, AWS Certified DevOps Engineer, or AWS Certified Security – Specialty.
· Experience with infrastructure-as-code tools such as Terraform, AWS CloudFormation, Pulumi, or CDK.
· Experience with container platforms and orchestration, including Docker, Kubernetes, Amazon ECS, or Amazon EKS.
· Experience integrating security tools such as SAST, DAST, SCA, secrets scanning, container scanning, and compliance checks into development pipelines.
· Familiarity with SIEM, SOAR, endpoint security, vulnerability management, and cloud security posture management tools.
· Experience supporting regulated, high-availability, or mission-critical environments.
Compensation:
$130,000.00-$140,000.00 annually, plus benefits, including medical/dental/vision coverage, PTO and a partial 401k match.
Vetting:
Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.
ThunderYard Solutions is proud to be an Equal Opportunity Employer. We don’t just accept difference – we celebrate it, we support it, and we thrive on it for the benefit of our employees, our community, and our customers. All applicants will be considered for employment without discrimination of race, color, religion, or belief, national, social, or ethnic origin, sex, age, physical, mental, or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union, or domestic partnership status, protected veteran status, family medical history or genetic information

Work arrangement
No