Senior DevOps Engineer (AWS)

We are seeking a Senior DevOps Engineer to take full ownership of the AWS platform supporting our .NET and React applications. This role involves managing everything from infrastructure as code to ensuring production reliability. You will collaborate closely with frontend, backend, QA, and infrastructure teams. Our platform runs .NET 10 services on ECS behind Application Load Balancers (ALB) and API Gateway, utilizing Lambda, SQS, DynamoDB, Aurora MySQL, Cognito, and CloudWatch. You will establish best practices for building, deploying, securing, and operating this environment.

Key Responsibilities

You will be responsible for the end-to-end management of the platform, including provisioning, deployment, monitoring, security, and cost control.

Infrastructure and Architecture
Design, build, and maintain AWS environments including VPCs, subnets, NAT gateways, Transit Gateway, and Route 53 across development, QA, staging, and production accounts. Manage containerized .NET 8 workloads on ECS (both Fargate and EC2), fronted by ALB and API Gateway. Support serverless components such as Lambda, SQS, SNS, EventBridge, Step Functions, and DynamoDB. Operate Aurora MySQL databases, handling parameter groups, backups, read replicas, failover, and Global Database configurations. Contribute to multi-region, active-active architectures, including data replication, routing, and failover testing.

Infrastructure as Code
Define all infrastructure using Terraform or AWS CDK, ensuring no manual changes occur in shared environments. Develop reusable modules, enforce code reviews on infrastructure changes, and manage state securely.

CI/CD and Release Engineering
Build and maintain CI/CD pipelines using GitHub Actions, Azure DevOps, or AWS CodePipeline for .NET APIs, React frontends, and Lambda functions. Implement deployment strategies such as blue/green and canary deployments, automated rollbacks, and database migration steps. Integrate quality gates including unit tests, static application security testing (SAST), dependency scanning, and container image scanning.

Observability and Reliability
Set up logging, metrics, tracing, and alerting using CloudWatch, X-Ray, and OpenTelemetry, with experience in Grafana or Datadog considered a plus. Define service level objectives (SLOs) and alerts in collaboration with engineering leads. Lead incident response efforts and conduct blameless post-mortems. Own backup strategies, disaster recovery planning, and recovery time objective (RTO) and recovery point objective (RPO) testing.

Security and Compliance
Manage AWS IAM with least privilege principles, AWS Organizations, Service Control Policies (SCPs), and Identity Center/SSO. Handle secrets management via Secrets Manager or Parameter Store and encryption with KMS. Operate security services including WAF, Shield, GuardDuty, Security Hub, and AWS Config, ensuring timely remediation of findings. Support Cognito-based authentication setups and environment hardening.

Cost and Governance
Monitor and optimize AWS spending through tagging standards, rightsizing, Savings Plans, budgets, and anomaly detection alerts. Provide monthly cost and reliability reports to engineering management.

People and Practice
Mentor developers and junior DevOps engineers. Create and maintain runbooks and platform documentation. Collaborate with backend, frontend, and QA leads to enable teams to self-serve environments and deployments.

Required Qualifications

- Minimum 5 years in DevOps, SRE, or cloud infrastructure roles, with at least 3 years managing production workloads on AWS.
- Deep hands-on experience with ECS, ALB, API Gateway, Lambda, SQS, DynamoDB, RDS/Aurora MySQL, Cognito, CloudWatch, IAM, and VPC networking.
- Strong skills in Terraform or AWS CDK, including module design and remote state management.
- Expertise in Docker, including multi-stage builds, image optimization, ECR, and image scanning.
- Experience building and owning CI/CD pipelines for .NET, Node.js/React, or serverless workloads.
- Proficiency in scripting with Bash plus one of Python, PowerShell, or C#.
- Solid Linux administration and networking fundamentals (DNS, TLS, load balancing, routing, security groups).
- Production on-call experience involving incident handling, root cause analysis, and post-mortems.
- Working knowledge of AWS security services and least-privilege IAM design.
- Familiarity with Git workflows (trunk-based or GitFlow), pull-request reviews, and branch protection.
- Bachelor’s degree in Computer Science or related field, or equivalent experience.

No preferred qualifications or benefits were specified.