DevSecOps Engineer

The AWS DevOps / DevSecOps Engineer will be responsible for designing, implementing, securing, and maintaining AWS-based infrastructure and deployment pipelines. The role requires strong hands-on experience with AWS services, infrastructure as code, CI/CD automation, container platforms, security scanning, vulnerability remediation, backup/DR, monitoring, and cloud security best practices. We are not looking for a generic cloud administrator. We are looking for someone who can actively improve AWS environments through automation, security hardening, reliable deployments, and operational excellence.
Responsibilities:
Design, build, and maintain AWS cloud infrastructure using best practices.
Create and manage Infrastructure as Code using Terraform and/or CloudFormation.
Build, enhance, and maintain CI/CD pipelines using tools such as Jenkins, GitHub Actions, GitLab CI, AWS CodePipeline, or similar.
Support containerised workloads using Docker and Kubernetes/EKS.
Implement DevSecOps practices across build, deployment, and infrastructure workflows.
Perform vulnerability analysis and remediation for AWS resources, EC2 instances, containers, dependencies, and infrastructure configurations.
Integrate and manage security scanning tools such as SAST, DAST, container scanning, and IaC scanning tools.
Work with tools such as SonarQube, Trivy, Checkov, OWASP ZAP, Snyk, Prisma Cloud, Wiz, or similar.
Configure and manage AWS security services such as IAM, Security Hub, GuardDuty, Inspector, Config, CloudTrail, KMS, WAF, and Secrets Manager.
Support patching, hardening, backup, disaster recovery, monitoring, logging, and alerting.
Build automation scripts using Python, Bash, PowerShell, or similar scripting languages.
Monitor system performance, troubleshoot infrastructure issues, and support production incidents.
Document infrastructure, deployment steps, security findings, remediation actions, and operational procedures.
Collaborate with application developers, data engineers, security teams, and client stakeholders.
Requirements:
Strong hands-on experience with AWS cloud services.
Experience with Terraform and/or CloudFormation.
Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, AWS CodePipeline, or Azure DevOps.
Good understanding of Docker and Kubernetes/EKS.
Experience with Linux systems, shell scripting, networking, IAM, and cloud security fundamentals.
Experience with vulnerability remediation and cloud security hardening.
Familiarity with DevSecOps tools such as SonarQube, Trivy, Checkov, OWASP ZAP, Snyk, or similar.
Experience with monitoring and logging tools such as CloudWatch, Prometheus, Grafana, ELK, Datadog, or similar.
Understanding of backup, disaster recovery, high availability, and incident response practices.
Strong troubleshooting, documentation, and communication skills.
Good to Have:
AWS certification such as AWS Solutions Architect, AWS SysOps Administrator, AWS DevOps Engineer, or AWS Security Speciality.
Experience with AWS Organisations, Control Tower, multi-account setup, landing zones, or governance.
Experience with SOC 2 ISO 27001 HIPAA, PCI, or other security/compliance frameworks.
Experience with ECR, ECS, Lambda, Step Functions, API Gateway, RDS, DynamoDB, S3 VPC, Route 53 and Load Balancers.
Experience with backup and DR tools such as AWS Backup, snapshots, cross-region replication, and recovery testing.
Experience supporting client-facing consulting engagements.
Exposure to data engineering or serverless workloads is a plus.

Experience
4-6 yrs