Senior AWS DevSecOps / Platform Engineer

Our client is seeking a remote Senior AWS DevSecOps / Platform Engineer to help build, secure, and operate a mission-critical cloud platform supporting high-availability scientific and operational workloads.

This is a remote position for a senior, hands-on engineer who is comfortable owning production AWS infrastructure from Infrastructure as Code through deployment, validation, monitoring, and ongoing operations.

The environment is built around AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps, with a strong emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration.

The ideal candidate has deep hands-on experience with Terraform and AWS, has operated Kubernetes/EKS in production, and understands how to build secure delivery pipelines that can withstand both operational scrutiny and formal security reviews.

This is an opportunity to join a small, experienced engineering team where senior engineers have meaningful ownership and influence over platform architecture, security, automation, and engineering standards.

What You Will Do

• Design, build, maintain, and improve production AWS infrastructure across multiple environments.

• Develop and maintain reusable Terraform modules and Infrastructure as Code used to provision and manage cloud infrastructure.

• Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code.

• Operate and maintain production Amazon EKS environments, including cluster networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing.

• Design and support Kubernetes workloads using Helm and modern container orchestration practices.

• Build and maintain GitOps-based deployment workflows using Argo CD, Flux, or comparable technologies.

• Develop and harden GitLab CI/CD pipelines supporting infrastructure and application delivery.

• Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation.

• Implement policy-as-code technologies such as OPA, Conftest, or comparable tools.

• Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation.

• Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity.

• Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity.

• Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies.

• Support the development and evolution of multi-account AWS environments and federal landing-zone architectures.

• Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices.

• Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities.

• Develop and maintain technical evidence and documentation supporting security controls and compliance reviews.

• Implement monitoring, logging, alerting, and observability using technologies such as Amazon CloudWatch, Grafana, or comparable platforms.

• Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues.

• Mentor other engineers and help establish strong engineering practices around code review, change management, automation, testing, and technical documentation.

• Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services.

What You Will Bring

Required Qualifications

• 7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments.

• Deep hands-on experience with Terraform, including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift.

• Strong hands-on AWS engineering experience supporting production workloads.

• Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services.

• Hands-on experience operating Kubernetes and Amazon EKS in production, not simply deploying applications to an existing cluster.

• Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management.

• Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform.

• Experience engineering CI/CD pipelines, with GitLab CI/CD strongly preferred.

• Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code.

• Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes.

• Experience supporting secure, highly available cloud infrastructure.

• Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF, including familiarity with requirements supporting an Authority to Operate.

• Strong troubleshooting, documentation, and communication skills.

• Ability to mentor engineers and provide senior technical leadership.

• U.S. Person with the ability to obtain and maintain a Public Trust.

Preferred Qualifications

• Experience designing or operating multi-account AWS environments, AWS Organizations, Control Tower, or federal cloud landing zones.

• Experience with AWS GovCloud or FedRAMP environments.

• Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer.

• Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies.

• Experience with Docker and secure container build practices.

• Experience with serverless AWS technologies such as Lambda.

• Experience with real-time or event-driven data-processing architectures.

• AWS certification such as Solutions Architect, DevOps Engineer, or Developer.

• Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems.

• Familiarity with scientific data formats such as NetCDF or GRIB.

Work Environment

• This position is remote.

• No routine on-site requirement is expected.

Security / Eligibility Requirements

• U.S. Person.

• Ability to obtain and maintain a security clearance.