Senior DevOps Engineer (AWS)

We are seeking a Senior DevOps Engineer to take full ownership of the AWS platform that supports our .NET and React applications. This role involves managing everything from infrastructure as code to ensuring production reliability. You will collaborate closely with frontend, backend, QA, and infrastructure teams. Our platform runs .NET 10 services on ECS behind ALB and API Gateway, utilizing Lambda, SQS, DynamoDB, Aurora MySQL, Cognito, and CloudWatch. You will be responsible for setting the standards for how we build, deploy, secure, and operate this environment.

Key Responsibilities

You will own the platform end-to-end, including provisioning, deployment, monitoring, security, and cost management.

Infrastructure and Architecture
- Design, build, and maintain AWS environments such as VPCs, subnets, NAT gateways, Transit Gateway, and Route 53 across development, QA, staging, and production accounts.
- Manage containerized .NET 8 workloads on ECS (Fargate and EC2), fronted by Application Load Balancers and API Gateway.
- Support serverless components including Lambda, SQS, SNS, EventBridge, Step Functions, and DynamoDB.
- Operate Aurora MySQL databases, handling parameter groups, backups, read replicas, failover, and Global Database configurations.
- Contribute to multi-region and active-active designs, including data replication, routing, and failover testing.

Infrastructure as Code
- Define all infrastructure using Terraform or AWS CDK, ensuring no manual changes in shared environments.
- Develop reusable modules, enforce code reviews on infrastructure changes, and manage state securely.

CI/CD and Release Engineering
- Build and maintain pipelines using GitHub Actions, Azure DevOps, or AWS CodePipeline for .NET APIs, React frontend, and Lambda functions.
- Implement blue/green and canary deployments, automated rollbacks, and database migration processes.
- Integrate quality gates such as unit tests, static application security testing (SAST), dependency scanning, and container image scanning.

Observability and Reliability
- Set up logging, metrics, tracing, and alerting using CloudWatch, X-Ray, and OpenTelemetry; experience with Grafana or Datadog is a plus.
- Define service level objectives (SLOs) and alerts in collaboration with engineering leads; lead incident response and conduct blameless post-mortems.
- Own backup strategies, disaster recovery planning, and recovery time/objective (RTO/RPO) testing.

Security and Compliance
- Manage IAM with least privilege principles, AWS Organizations, Service Control Policies (SCPs), and AWS Single Sign-On/Identity Center.
- Handle secrets management using AWS Secrets Manager or Parameter Store and encryption with KMS.
- Operate security services including WAF, Shield, GuardDuty, Security Hub, and AWS Config, ensuring timely remediation of findings.
- Support Cognito-based authentication setups and environment hardening.

Cost and Governance
- Monitor and optimize AWS spending through tagging standards, rightsizing, Savings Plans, budgets, and anomaly detection alerts.
- Provide monthly reports on cost and reliability metrics to engineering management.

People and Practice
- Mentor developers and junior DevOps engineers; create runbooks and maintain platform documentation.
- Collaborate with backend, frontend, and QA leads to enable teams to self-serve environments and deployments.

Required Qualifications

- Minimum 5 years in DevOps, SRE, or cloud infrastructure roles, with at least 3 years managing production workloads on AWS.
- Extensive hands-on experience with ECS, ALB, API Gateway, Lambda, SQS, DynamoDB, RDS/Aurora MySQL, Cognito, CloudWatch, IAM, and VPC networking.
- Strong skills in Terraform or AWS CDK, including module design and remote state management.
- Proficiency with Docker, including multi-stage builds, image optimization, ECR, and image scanning.
- Experience building and owning CI/CD pipelines for .NET, Node.js/React, or serverless workloads.
- Scripting expertise in Bash plus one of Python, PowerShell, or C#.
- Solid Linux administration and networking fundamentals (DNS, TLS, load balancing, routing, security groups).
- Production on-call experience involving incident handling, root cause analysis, and post-mortems.
- Working knowledge of AWS security services and least-privilege IAM design.
- Familiarity with Git workflows (trunk-based or GitFlow), pull-request reviews, and branch protection.
- Bachelor’s degree in Computer Science or related field, or equivalent experience.

No preferred qualifications or benefits were specified for this role.