Senior DevOps Engineer (AWS)
Job Location:
Monthly Salary:
Experience Required:
Posted:
Application Deadline:
Vacancies:
Job Summary
We are hiring a Senior DevOps Engineer to own the AWS platform behind and React products from infrastructure as code to production reliability.You will work across our frontend backend QA and infrastructure tracks. The platform 10 services on ECS behind ALB and API Gateway with Lambda SQS DynamoDB Aurora MySQL Cognito and CloudWatch. You will set the standards for how we build ship secure and run it
Key responsibilities
You own the platform end to end: how it is provisioned deployed observed secured and paid for.
Infrastructure and architecture
Design build and maintain AWS environments (VPC subnets NAT Transit Gateway Route 53) across dev QA staging and production accounts.
Run containerised .NET 8 workloads on ECS (Fargate and EC2) fronted by ALB and API Gateway.
Support serverless components: Lambda SQS SNS EventBridge Step Functions and DynamoDB.
Operate Aurora MySQL: parameter groups backups read replicas failover and Global Database where needed.
Contribute to multi-region and active-active designs including data replication routing and failover testing.
Infrastructure as code
Define all infrastructure in Terraform or AWS CDK; no manual console changes in shared environments.
Build reusable modules enforce code review on infrastructure changes and manage state safely.
CI/CD and release engineering
Build and maintain pipelines (GitHub Actions Azure DevOps or AWS CodePipeline) APIs React frontend and Lambda functions.
Implement blue/green and canary deployments automated rollbacks and database migration steps.
Integrate quality gates: unit tests SAST dependency and container image scanning
Observability and reliability
Set up logging metrics tracing and alerting with CloudWatch X-Ray and OpenTelemetry (Grafana or Datadog a plus).
Define SLOs and alerts with the engineering leads; lead incident response and blameless post-mortems.
Own backup disaster recovery and RTO/RPO testing.
Security and compliance
Manage IAM with least privilege AWS Organizations SCPs and SSO / Identity Center.
Handle secrets with Secrets Manager / Parameter Store and encryption with KMS.
Run WAF Shield GuardDuty Security Hub and AWS Config; close findings within agreed timelines.
Support Cognito-based authentication setup and environment hardening.
Cost and governance
Track and reduce AWS spend: tagging standards rightsizing Savings Plans budgets and anomaly alerts.
Report monthly cost and reliability figures to engineering management.
People and practice
Mentor developers and junior DevOps engineers; write runbooks and platform documentation.
Partner with backend frontend and QA leads so teams can self-serve environments and deployments.
Required qualifications
5 years in DevOps SRE or cloud infrastructure roles with 3 years running production workloads on AWS.
Deep hands-on experience with ECS ALB API Gateway Lambda SQS DynamoDB RDS/Aurora MySQL Cognito CloudWatch IAM and VPC networking.
Strong Terraform or AWS CDK skills including module design and remote state management.
Docker expertise: multi-stage builds image optimisation ECR and image scanning.
Built and owned CI/CD pipelines for at least one or serverless workloads.
Scripting in Bash plus one of Python PowerShell or C#.
Solid Linux administration and networking fundamentals (DNS TLS load balancing routing security groups).
Production on-call experience: incident handling root cause analysis and post-mortems.
Working knowledge of AWS security services and least-privilege IAM design.
Git workflows (trunk-based or GitFlow) pull-request reviews and branch protection.
Bachelors degree in Computer Science or a related field or equivalent experience.
