Cloud & DevSecOps Engineer

Role Overview We are seeking an experienced Senior Cloud& DevSecOps Engineer to take technical ownership of the design, automation,security, reliability and operation of our cloud infrastructure. This is a hands-on senior engineering rolecombining AWS Cloud Engineering, Infrastructure as Code (Terraform), DevOpsautomation and Cloud Security. The successful candidate will be expectednot only to operate cloud infrastructure, but to establish engineeringstandards, improve architecture, automate infrastructure provisioning,strengthen cloud security controls and provide technical leadership incloud-related initiatives. Key Responsibilities Cloud Architecture & Engineering • Design, implement and continuously improve secure, scalable and highly available AWS environments. • Own AWS architecture covering compute, networking, storage, databases, identity, security, monitoring and resilience. • Design VPCs, network segmentation, routing, private/public connectivity, security groups and hybrid connectivity. • Establish appropriate Development, UAT/Staging and Production environment architectures. • Design backup, disaster recovery, high-availability and business-continuity solutions. • Review existing AWS environments and recommend architecture, performance, security and cost improvements. Infrastructure as Code & Automation • Own and maintain the organization's Terraform Infrastructure-as-Code framework. • Develop reusable and standardized Terraform modules. • Establish standards for Terraform state management, environment separation, version control and change management. • Automate infrastructure provisioning and configuration. • Implement Infrastructure-as-Code review and approval processes. • Minimize manual infrastructure configuration and configuration drift. DevOps & Platform Engineering • Design and maintain CI/CD pipelines for application and infrastructure deployment. • Integrate Terraform and security controls into CI/CD workflows. • Support Docker/container-based workloads and Kubernetes/EKS where applicable. • Establish standardized deployment patterns across Development, Testing, Staging and Production. • Work closely with application teams to improve deployment reliability and release processes. • Develop scripts and automation using Python, Bash, PowerShell or equivalent technologies. Cloud Security & DevSecOps • Establish and enforce security-by-design principles across cloud infrastructure. • Design and review AWS IAM architecture based on least privilege and appropriate segregation of duties. • Implement cloud security controls covering identity, networking, encryption, secrets, logging and monitoring. • Implement and manage AWS security capabilities including CloudTrail, GuardDuty, Security Hub, AWS Config, WAF and related services. • Integrate vulnerability scanning, IaC scanning and security checks into CI/CD pipelines. • Conduct cloud configuration and security reviews and drive remediation. • Support security audits, risk assessments and compliance activities. • Align cloud security practices with appropriate standards and frameworks including CIS, NIST and relevant industry requirements. Reliability, Monitoring & IncidentManagement • Establish appropriate monitoring, logging, observability and alerting. • Participate in and lead technical response to major cloud/infrastructure incidents. • Perform root-cause analysis and implement corrective and preventive actions. • Improve infrastructure resilience and eliminate recurring operational problems. • Maintain architecture diagrams, operational runbooks, recovery procedures and technical documentation. Governance & Optimization • Establish cloud architecture, security and Infrastructure-as-Code standards. • Monitor and optimize AWS utilization and expenditure. • Identify security, operational and technical risks and recommend mitigation measures. • Participate in architecture and technical design reviews. • Provide technical guidance and mentoring to other engineers. • Evaluate new cloud and DevSecOps technologies where they provide measurable business or operational value. Candidate Requirements Essential • Relevant IT infrastructure, cloud, DevOps or security experience. • Strong hands-on experience with AWS in production environments. • Strong hands-on experience with Terraform / Infrastructure as Code. • Strong understanding of AWS networking, VPC architecture, routing, DNS, load balancing and security. • Strong understanding of IAM, encryption, secrets management and cloud security. • Experience designing and operating production-grade cloud environments. • Experience with Git and CI/CD technologies. • Strong Linux and troubleshooting skills. • Ability to independently investigate complex infrastructure, networking, security and deployment problems. Highly Desirable • Docker and Kubernetes / Amazon EKS. • GitHub Actions, GitLab CI/CD, Jenkins or equivalent. • Python/Bash/PowerShell automation. • AWS security and monitoring technologies. • Experience with DevSecOps tooling and Infrastructure-as-Code security scanning. • Hybrid cloud/on-premise integration. • Cloud cost optimization / FinOps. • Experience supporting business-critical production environments. Professional Certifications The following certifications are highlydesirable: • AWS Professional or Associate-level certification • HashiCorp Terraform certification • CCSP — Certified Cloud Security Professional Other relevant cloud, DevOps, networking orcybersecurity certifications will also be considered.