AWS DevOps/Security Engineer Senior/Architect
Quick Summary
Design, build, and operate AWS environments across development, testing, user acceptance testing (UAT), production, and disaster recovery (DR) stages. Manage AWS accounts, service quotas,
8+ years of hands-on experience in AWS cloud engineering, DevOps, platform engineering, or cloud security. Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch,
We are seeking a highly experienced AWS DevOps/Security Engineer Senior/Architect to design, build, secure, and operate enterprise-scale cloud environments. This role plays a critical part in supporting large-scale modernization and data migration initiatives through robust AWS infrastructure and platform engineering. You will oversee cloud architecture, networking, security, automation, CI/CD pipelines, and production operations across multiple environments. Working with modern infrastructure-as-code technologies, you will develop scalable, secure, and automated solutions while ensuring compliance and operational reliability. You will also drive cloud governance, cost optimization, observability, and disaster recovery strategies. This is an opportunity to take ownership of complex cloud engineering challenges within a highly technical, enterprise-focused environment.
In this role, you will lead the design, implementation, security, and operational management of AWS infrastructure while ensuring high availability, scalability, and compliance across enterprise environments. Your responsibilities will include:
Design, build, and operate AWS environments across development, testing, user acceptance testing (UAT), production, and disaster recovery (DR) stages.
Manage AWS accounts, service quotas, resource governance, tagging strategies, cost controls, and environment readiness.
Design and implement private VPC and spoke architectures, including subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity.
Coordinate integrations between AWS infrastructure and corporate networks, firewalls, Netskope, on-premises systems, and shared cloud networking services.
Build, configure, and maintain AWS services, including EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, and Systems Manager.
Design and manage IAM roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access.
Implement security controls covering KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and regulatory compliance.
Develop infrastructure automation using Terraform, AWS CloudFormation, AWS CLI, Python, PowerShell, and Bash.
Build and maintain GitHub-based CI/CD pipelines for infrastructure provisioning and application deployments.
Implement automated validation, security scanning, policy checks, approval workflows, release controls, and rollback procedures.
Establish centralized monitoring and observability using CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alerts, and operational dashboards.
Support AWS MWAA/Airflow environments, RDS PostgreSQL, S3 landing zones, bastion services, and private application access.
Troubleshoot complex infrastructure and application issues involving IAM, KMS, DNS, routing, firewalls, endpoints, Linux, EC2, databases, and managed AWS services.
Conduct architecture reviews, cost optimization initiatives, capacity planning, disaster recovery assessments, and production-readiness evaluations.
Develop and maintain architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation.
Participate in production support, incident response, root-cause analysis, and continuous service improvement initiatives.
Requirements
~2 min readThe ideal candidate combines extensive AWS engineering expertise with strong cloud security, automation, and production operations capabilities. You should demonstrate:
8+ years of hands-on experience in AWS cloud engineering, DevOps, platform engineering, or cloud security.
Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity.
Experience designing and operating private, regulated, or enterprise-scale AWS environments.
Advanced infrastructure-as-code expertise, particularly with Terraform; experience with CloudFormation or AWS CDK is also beneficial.
Hands-on experience building and maintaining CI/CD pipelines using GitHub Actions or comparable platforms.
Proficiency in AWS CLI, Linux administration, and scripting languages such as Python, PowerShell, and Bash.
Strong understanding of identity federation, SAML/OIDC, secrets management, digital certificates, encryption, and least-privilege access principles.
Proven ability to troubleshoot complex technical issues across cloud infrastructure, networking, security, application environments, and on-premises systems.
Experience with cloud monitoring, incident response, change management, and production operations.
Strong analytical and problem-solving skills, with the ability to manage complex technical challenges independently.
Excellent documentation and communication skills, particularly when working across technical teams and enterprise stakeholders.
Preferred Qualifications:
AWS certifications such as Solutions Architect, DevOps Engineer, Security Specialty, or Advanced Networking.
Experience with AWS MWAA, Apache Airflow, Cognito, RDS PostgreSQL, AWS Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS.
Previous experience supporting healthcare, government, or other highly regulated workloads.
What We Offer
~1 min readOpportunity to work on large-scale AWS modernization and data migration programs.
Exposure to advanced cloud infrastructure, security, automation, and DevOps technologies.
Opportunity to design and influence enterprise-level cloud architecture.
Collaborative and inclusive working environment that values diversity, equity, and innovation.
Opportunity to contribute to secure and reliable digital solutions with meaningful business and societal impact.
Location & Eligibility
About this job
- Who can apply
- United States
- Posted
- Today
Listing Details
- Posted
- November 5, 2026
- First seen
- November 5, 2026
- Last seen
- November 5, 2026
Posting Health
- Days active
- 0
- Repost count
- 0
- Trust Level
- 68%
- Scored at
- November 5, 2026
Signal breakdown
4 other jobs at
View all →Similar Security Engineer jobs
View all →Browse Similar Jobs
Stay ahead of the market
Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.
No spam. Unsubscribe at any time.