Our client is seeking a remote Senior AWS DevSecOps / Platform Engineer to help build, secure, and operate a mission-critical cloud platform supporting high-availability scientific and operational workloads. This is a remote position for a senior, hands-on engineer who is comfortable owning production AWS infrastructure from Infrastructure as Code through deployment, validation, monitoring, and ongoing operations. The environment is built around AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps, with a strong emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration. The ideal candidate has deep hands-on experience with Terraform and AWS, has operated Kubernetes/EKS in production, and understands how to build secure delivery pipelines that can withstand both operational scrutiny and formal security reviews. This is an opportunity to join a small, experienced engineering team where senior engineers have meaningful ownership and influence over platform architecture, security, automation, and engineering standards. What You Will Do
- Design, build, maintain, and improve production AWS infrastructure across multiple environments.
- Develop and maintain reusable Terraform modules and Infrastructure as Code used to provision and manage cloud infrastructure.
- Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code.
- Operate and maintain production Amazon EKS environments, including cluster networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing.
- Design and support Kubernetes workloads using Helm and modern container orchestration practices.
- Build and maintain GitOps-based deployment workflows using Argo CD, Flux, or comparable technologies.
- Develop and harden GitLab CI/CD pipelines supporting infrastructure and application delivery.
- Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation.
- Implement policy-as-code technologies such as OPA, Conftest, or comparable tools.
- Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation.
- Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity.
- Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity.
- Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies.
- Support the development and evolution of multi-account AWS environments and federal landing-zone architectures.
- Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices.
- Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities.
- Develop and maintain technical evidence and documentation supporting security controls and compliance reviews.
- Implement monitoring, logging, alerting, and observability using technologies such as Amazon CloudWatch, Grafana, or comparable platforms.
- Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues.
- Mentor other engineers and help establish strong engineering practices around code review, change management, automation, testing, and technical documentation.
- Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services.
What You Will Bring Required Qualifications
- 7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments.
- Deep hands-on experience with Terraform, including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift.
- Strong hands-on AWS engineering experience supporting production workloads.
- Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services.
- Hands-on experience operating Kubernetes and Amazon EKS in production, not simply deploying applications to an existing cluster.
- Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management.
- Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform.
- Experience engineering CI/CD pipelines, with GitLab CI/CD strongly preferred.
- Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code.
- Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes.
- Experience supporting secure, highly available cloud infrastructure.
- Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF, including familiarity with requirements supporting an Authority to Operate.
- Strong troubleshooting, documentation, and communication skills.
- Ability to mentor engineers and provide senior technical leadership.
- U.S. Person with the ability to obtain and maintain a Public Trust.
Preferred Qualifications
- Experience designing or operating multi-account AWS environments, AWS Organizations, Control Tower, or federal cloud landing zones.
- Experience with AWS GovCloud or FedRAMP environments.
- Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer.
- Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies.
- Experience with Docker and secure container build practices.
- Experience with serverless AWS technologies such as Lambda.
- Experience with real-time or event-driven data-processing architectures.
- AWS certification such as Solutions Architect, DevOps Engineer, or Developer.
- Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems.
- Familiarity with scientific data formats such as NetCDF or GRIB.
Work Environment
- This position is remote.
- No routine on-site requirement is expected.
Security / Eligibility Requirements
- U.S. Person.
- Ability to obtain and maintain a security clearance.