Senior AWS DevSecOps / Platform Engineer

Our client is seeking a remote Senior AWS DevSecOps / Platform Engineer to help build, secure, and operate a mission-critical cloud platform supporting high-availability scientific and operational workloads. This is a remote position for a senior, hands-on engineer who is comfortable owning production AWS infrastructure from Infrastructure as Code through deployment, validation, monitoring, and ongoing operations. The environment is built around AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps, with a strong emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration. The ideal candidate has deep hands-on experience with Terraform and AWS, has operated Kubernetes/EKS in production, and understands how to build secure delivery pipelines that can withstand both operational scrutiny and formal security reviews. This is an opportunity to join a small, experienced engineering team where senior engineers have meaningful ownership and influence over platform architecture, security, automation, and engineering standards. What You Will Do

• Design, build, maintain, and improve production AWS infrastructure across multiple environments.
• Develop and maintain reusable Terraform modules and Infrastructure as Code used to provision and manage cloud infrastructure.
• Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code.
• Operate and maintain production Amazon EKS environments, including cluster networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing.
• Design and support Kubernetes workloads using Helm and modern container orchestration practices.
• Build and maintain GitOps-based deployment workflows using Argo CD, Flux, or comparable technologies.
• Develop and harden GitLab CI/CD pipelines supporting infrastructure and application delivery.
• Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation.
• Implement policy-as-code technologies such as OPA, Conftest, or comparable tools.
• Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation.
• Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity.
• Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity.
• Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies.
• Support the development and evolution of multi-account AWS environments and federal landing-zone architectures.
• Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices.
• Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities.
• Develop and maintain technical evidence and documentation supporting security controls and compliance reviews.
• Implement monitoring, logging, alerting, and observability using technologies such as Amazon CloudWatch, Grafana, or comparable platforms.
• Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues.
• Mentor other engineers and help establish strong engineering practices around code review, change management, automation, testing, and technical documentation.
• Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services.

What You Will Bring Required Qualifications

• 7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments.
• Deep hands-on experience with Terraform, including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift.
• Strong hands-on AWS engineering experience supporting production workloads.
• Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services.
• Hands-on experience operating Kubernetes and Amazon EKS in production, not simply deploying applications to an existing cluster.
• Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management.
• Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform.
• Experience engineering CI/CD pipelines, with GitLab CI/CD strongly preferred.
• Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code.
• Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes.
• Experience supporting secure, highly available cloud infrastructure.
• Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF, including familiarity with requirements supporting an Authority to Operate.
• Strong troubleshooting, documentation, and communication skills.
• Ability to mentor engineers and provide senior technical leadership.
• U.S. Person with the ability to obtain and maintain a Public Trust.

Preferred Qualifications

• Experience designing or operating multi-account AWS environments, AWS Organizations, Control Tower, or federal cloud landing zones.
• Experience with AWS GovCloud or FedRAMP environments.
• Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer.
• Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies.
• Experience with Docker and secure container build practices.
• Experience with serverless AWS technologies such as Lambda.
• Experience with real-time or event-driven data-processing architectures.
• AWS certification such as Solutions Architect, DevOps Engineer, or Developer.
• Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems.
• Familiarity with scientific data formats such as NetCDF or GRIB.

Work Environment

• This position is remote.
• No routine on-site requirement is expected.

Security / Eligibility Requirements

• U.S. Person.
• Ability to obtain and maintain a security clearance.