Senior DevOps Engineer (AWS)

We are seeking a Senior DevOps Engineer to take full ownership of the AWS platform supporting our .NET and React applications. This role involves managing everything from infrastructure as code to ensuring production reliability. You will collaborate closely with frontend, backend, QA, and infrastructure teams to maintain and enhance a platform running .NET 10 services on ECS, behind ALB and API Gateway, utilizing Lambda, SQS, DynamoDB, Aurora MySQL, Cognito, and CloudWatch. You will establish and enforce standards for building, deploying, securing, and operating the platform.

Key Responsibilities

You will be responsible for the end-to-end management of the platform, including provisioning, deployment, monitoring, security, and cost control.

Infrastructure and Architecture
- Design, build, and maintain AWS environments (VPC, subnets, NAT, Transit Gateway, Route 53) across development, QA, staging, and production accounts.
- Operate containerized .NET 8 workloads on ECS (Fargate and EC2), fronted by ALB and API Gateway.
- Support serverless components such as Lambda, SQS, SNS, EventBridge, Step Functions, and DynamoDB.
- Manage Aurora MySQL instances, including parameter groups, backups, read replicas, failover, and Global Database configurations.
- Contribute to multi-region and active-active architecture designs, including data replication, routing, and failover testing.

Infrastructure as Code
- Define all infrastructure using Terraform or AWS CDK, ensuring no manual changes in shared environments.
- Develop reusable modules, enforce code reviews on infrastructure changes, and manage state securely.

CI/CD and Release Engineering
- Build and maintain pipelines using GitHub Actions, Azure DevOps, or AWS CodePipeline for .NET APIs, React frontend, and Lambda functions.
- Implement blue/green and canary deployments, automated rollbacks, and database migration steps.
- Integrate quality gates such as unit tests, static application security testing (SAST), dependency scanning, and container image scanning.

Observability and Reliability
- Set up logging, metrics, tracing, and alerting using CloudWatch, X-Ray, and OpenTelemetry; experience with Grafana or Datadog is a plus.
- Define service level objectives (SLOs) and alerts in collaboration with engineering leads; lead incident response and conduct blameless post-mortems.
- Own backup strategies, disaster recovery plans, and RTO/RPO testing.

Security and Compliance
- Manage IAM with least privilege principles, AWS Organizations, Service Control Policies (SCPs), and SSO/Identity Center.
- Handle secrets management with AWS Secrets Manager and Parameter Store; manage encryption keys with KMS.
- Operate security services including WAF, Shield, GuardDuty, Security Hub, and AWS Config, ensuring timely remediation of findings.
- Support Cognito-based authentication and environment hardening efforts.

Cost and Governance
- Monitor and optimize AWS spending through tagging standards, rightsizing, Savings Plans, budgets, and anomaly detection alerts.
- Provide monthly reports on cost and reliability metrics to engineering management.

People and Practice
- Mentor developers and junior DevOps engineers; author runbooks and platform documentation.
- Collaborate with backend, frontend, and QA leads to enable self-service environments and deployments.

Required Qualifications
- Minimum 5 years of experience in DevOps, SRE, or cloud infrastructure roles, with at least 3 years managing production workloads on AWS.
- Extensive hands-on experience with ECS, ALB, API Gateway, Lambda, SQS, DynamoDB, RDS/Aurora MySQL, Cognito, CloudWatch, IAM, and VPC networking.
- Strong skills in Terraform or AWS CDK, including module development and remote state management.
- Proficiency with Docker, including multi-stage builds, image optimization, ECR, and image scanning.
- Experience building and owning CI/CD pipelines for .NET, Node.js/React, or serverless workloads.
- Scripting expertise in Bash plus one of Python, PowerShell, or C#.
- Solid Linux administration and networking fundamentals, including DNS, TLS, load balancing, routing, and security groups.
- Production on-call experience involving incident handling, root cause analysis, and post-mortems.
- Working knowledge of AWS security services and best practices for least-privilege IAM design.
- Familiarity with Git workflows (trunk-based or GitFlow), pull-request reviews, and branch protection.
- Bachelor’s degree in Computer Science or a related field, or equivalent professional experience.

This role offers the opportunity to lead and shape a critical cloud platform while working with a talented, cross-functional team in a dynamic environment.