Senior AWS Cloud DevSecOps Engineer

ABOUT THE ROLE & ORGANISATION

Together with our client we are building a secure enterprise-grade AWS platform that supports critical business operations at scale where reliability security and delivery speed directly impact outcomes.

Our DevSecOps team owns the infrastructure lifecycle including IaC CI/CD Kubernetes observability security and developer experience in close partnership with engineering security and operations teams.

ROLE OVERVIEW

The Senior AWS Cloud DevSecOps Engineer owns secure scalable and highly available AWS infrastructure defining standards reference patterns and delivery direction for the DevOps team.

The role combines platform engineering automation CI/CD observability security and leadership in enterprise regulated environments to improve reliability deployment speed and cloud security.

KEY SKILLS & TECHNOLOGY STACK

KEY RESPONSIBILITIES

Cloud Architecture & Platform Ownership

• Own the AWS DevSecOps roadmap engineering standards and reusable reference patterns.
• Design Terraform and AWS CDK modules for production-grade multi-region infrastructure.
• Govern core AWS services including EKS API Gateway ALB/NLB CloudFront VPC PrivateLink Secrets Manager KMS SQS SNS and Kinesis.
• Standardise infrastructure configuration and environment parity across production staging and development.
• Apply FinOps practices using AWS Cost Explorer Compute Optimizer Savings Plans and related tooling.

CI/CD & Delivery Engineering

• Build and operate reusable CI/CD pipelines with AWS CodePipeline CodeBuild CodeDeploy GitHub Actions GitLab CI/CD or Jenkins.
• Embed security checks such as SAST secret scanning and container image scanning into delivery workflows.
• Use ArgoCD or Flux for declarative auditable Kubernetes delivery on EKS.

Kubernetes & Container Platform

• Manage Amazon EKS clusters ingress autoscaling Karpenter and service mesh adoption where applicable.
• Maintain Helm libraries and containers build pipelines for multi-environment delivery via Amazon ECR.
• Troubleshoot Kubernetes issues perform root-cause analysis and implement scalable fixes.

Observability & Reliability

• Drive observability with CloudWatch X-Ray OpenSearch Datadog or Dynatrace for tracing dashboards SLOs and alerts.
• Define reliability standards error budgets incident response practices and blameless postmortems.
• Improve reliability and deployment efficiency through proactive monitoring and automated remediation.

Security & Compliance (DevSecOps)

• Embed security across IAM secrets encryption network controls and CI/CD workflows.
• Manage cloud security posture using IAM Identity Center IRSA AWS Config Security Hub GuardDuty Macie Inspector WAF Shield and VPC Endpoints.
• Support vulnerability remediation cloud governance and compliance requirements such as SOC 2 PCI-DSS HIPAA or FedRAMP where applicable.
• Resolve compute storage IAM and public access findings as part of ongoing cloud security operations.

Leadership & Collaboration

• Lead and mentor the DevSecOps team while reinforcing ownership standards and continuous improvement.
• Partner with engineering product security and business stakeholders to improve developer experience and delivery outcomes.
• Communicate technical trade-offs clearly and maintain practical architecture and platform documentation.

REQUIRED QUALIFICATIONS

• 5 years in DevOps Cloud or SRE including 2 years in a lead or architect role.
• Hands-on production AWS experience with EKS API Gateway ALB/NLB CloudFront VPC PrivateLink Secrets Manager KMS SQS SNS and Kinesis.
• Strong Terraform skills including modular design remote state and environment separation; AWS CDK is a plus.
• Production Kubernetes experience with Amazon EKS Helm and containerized applications.
• CI/CD experience with CodePipeline CodeBuild CodeDeploy GitHub Actions GitLab CI/CD or Jenkins.
• Strong AWS networking security identity scripting troubleshooting and production support skills.
• Experience in enterprise multi-region AWS environments and ability to explain technical trade-offs to stakeholders.
• AWS Certified DevOps Engineer Associate or Professional is mandatory.

PREFERRED QUALIFICATIONS

• Exposure to Azure or GCP alongside AWS.
• Experience with GitOps Datadog/Dynatrace FinOps vulnerability management or service mesh technologies.
• Exposure to regulated financial services or global operational environments.
• Graduate or postgraduate degree or equivalent qualification.

CERTIFICATIONS

Required (Senior Level)

Strongly Recommended

Advantageous

Required Experience:

Senior IC