Jobs


AWS DevSecOps Engineer

Location: Remote
Employment Type: Contract

Role Overview As an AWS DevSecOps Engineer, you will play a key role in designing and maintaining secure, scalable cloud infrastructures. You will embed security practices throughout the development lifecycle, ensuring compliance and resilience in cloud-native applications and pipelines.

Key Responsibilities

  • Architect, implement, and manage secure AWS cloud environments.
  • Integrate security controls into CI/CD pipelines, ensuring continuous compliance.
  • Automate infrastructure deployment with Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation).
  • Collaborate with development teams to embed DevSecOps principles across projects.
  • Monitor, detect, and remediate security vulnerabilities in cloud environments.
  • Ensure compliance alignment with HIPAA, SOC 2, ISO 27001, and PCI frameworks.

Required Qualifications

  • AWS Certified Solutions Architect (Associate or Professional)
  • AWS Certified DevOps Engineer
  • Strong experience with CI/CD tools (e.g., GitHub Actions, Jenkins, GitLab CI).
  • In-depth knowledge of DevSecOps principles, including secrets management, container security, and vulnerability management.
  • Proficiency with IaC tools (Terraform, AWS CloudFormation).
  • Familiarity with AWS security services (GuardDuty, Security Hub, IAM, KMS, Config, WAF).
  • Hands-on development and scripting skills (Python, Bash, PowerShell, or Go).

Preferred Skills

  • Experience in regulated environments with compliance frameworks such as HIPAA, SOC 2, ISO 27001, and PCI-DSS.
  • Knowledge of cloud-native monitoring and logging solutions (CloudWatch, Elasticsearch, Prometheus, Grafana).
  • Experience with Kubernetes security and AWS EKS.
  • Strong communication skills and ability to work independently in a consulting environment.

What We Offer

  • Competitive compensation
  • Fully remote work flexibility
  • Professional development and certification support
  • Opportunity to work on cutting-edge cloud security and compliance projects