Senior AWS DevSecOps / Platform Engineer

Our client is seeking a remote Senior AWS DevSecOps / Platform Engineer to help build, secure, and operate a mission-critical cloud platform supporting high-availability scientific and operational workloads.

This is a remote position for a senior, hands-on engineer who is comfortable owning production AWS infrastructure from Infrastructure as Code through deployment, validation, monitoring, and ongoing operations.

The environment is built around AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps , with a strong emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration.

The ideal candidate has deep hands-on experience with Terraform and AWS, has operated Kubernetes/EKS in production, and understands how to build secure delivery pipelines that can withstand both operational scrutiny and formal security reviews.

This is an opportunity to join a small, experienced engineering team where senior engineers have meaningful ownership and influence over platform architecture, security, automation, and engineering standards.

What You Will Do

-

Design, build, maintain, and improve production AWS infrastructure across multiple environments.

-

Develop and maintain reusable Terraform modules and Infrastructure as Code used to provision and manage cloud infrastructure.

-

Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code.

-

Operate and maintain production Amazon EKS environments, including cluster networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing.

-

Design and support Kubernetes workloads using Helm and modern container orchestration practices.

-

Build and maintain GitOps-based deployment workflows using Argo CD, Flux, or comparable technologies.

-

Develop and harden GitLab CI/CD pipelines supporting infrastructure and application delivery.

-

Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation.

-

Implement policy-as-code technologies such as OPA, Conftest, or comparable tools.

-

Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation.

-

Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity.

-

Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity.

-

Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies.

-

Support the development and evolution of multi-account AWS environments and federal landing-zone architectures.

-

Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices.

-

Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities.

-

Develop and maintain technical evidence and documentation supporting security controls and compliance reviews.

-

Implement monitoring, logging, alerting, and observability using technologies such as Amazon CloudWatch, Grafana, or comparable platforms.

-

Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues.

-

Mentor other engineers and help establish strong engineering practices around code review, change management, automation, testing, and technical documentation.

-

Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services.

What You Will Bring

Required Qualifications

-

7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments.

-

Deep hands-on experience with Terraform , including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift.

-

Strong hands-on AWS engineering experience supporting production workloads.

-

Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services.

-

Hands-on experience operating Kubernetes and Amazon EKS in production , not simply deploying applications to an existing cluster.

-

Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management.

-

Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform.

-

Experience engineering CI/CD pipelines, with GitLab CI/CD strongly preferred.

-

Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code.

-

Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes.

-

Experience supporting secure, highly available cloud infrastructure.

-

Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF , including familiarity with requirements supporting an Authority to Operate.

-

Strong troubleshooting, documentation, and communication skills.

-

Ability to mentor engineers and provide senior technical leadership.

-

U.S. Person with the ability to obtain and maintain a Public Trust.

Preferred Qualifications

-

Experience designing or operating multi-account AWS environments , AWS Organizations, Control Tower, or federal cloud landing zones.

-

Experience with AWS GovCloud or FedRAMP environments.

-

Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer.

-

Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies.

-

Experience with Docker and secure container build practices.

-

Experience with serverless AWS technologies such as Lambda.

-

Experience with real-time or event-driven data-processing architectures.

-

AWS certification such as Solutions Architect, DevOps Engineer, or Developer.

-

Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems.

-

Familiarity with scientific data formats such as NetCDF or GRIB.

Work Environment

-

This position is remote .

-

No routine on-site requirement is expected.

Security / Eligibility Requirements

-

U.S. Person.

-

Ability to obtain and maintain a security clearance.

Originally posted on Himalayas