DevOps Engineer (TypeScript / AWS CDK)

Our client operates secure, multi-account AWS environments serving both commercial and government-adjacent workloads. They need a cloud engineer who lives in TypeScript CDK and can own infrastructure end to end: writing it, shipping it, debugging it in production, and improving it without being told what to do next. You’ll join a disciplined engineering team that runs everything through GitLab and Jira with tight change control.

What You’ll Do

• Own infrastructure delivery in AWS CDK (TypeScript), from reusable construct libraries

to full environment stacks

• Stand up and maintain segmented account architectures spanning networking,

security/logging, shared tooling, and workload environments from dev through prod

• Write Lambda functions that power automation, monitoring, integrations, and deployment

workflows

• Ship code through GitLab merge requests and CI/CD, with clean commits and reviews

tied back to Jira tickets

• Run down production issues using CloudTrail, CloudWatch, Config, flow logs, and IAM

Access Analyzer

• Contribute to serverless and event-driven designs, plus containerized workloads on

ECS, EKS, or Kubernetes

• Bake security into everything: least-privilege IAM, encryption with KMS, tagging

standards, logging, and compliance-aligned patterns

• Keep documentation current - designs, runbooks, deployment steps, and

troubleshooting notes

• Spot gaps, propose fixes, and keep moving without waiting on direction

• Deep hands-on CDK experience in TypeScript (this is the core requirement - Terraform

or CloudFormation alone won’t cut it)

• Solid command of core AWS: IAM, VPC networking, security groups, routing, S3, KMS,

Lambda, CloudWatch, CloudTrail

• Time spent in GovCloud or similarly structured multi-account environments with strict

account separation

• Comfort with GitLab-based workflows and Jira-driven task management

• Ability to read someone else’s infrastructure code, understand why it exists, and extend

it without breaking things

Ability to read someone else’s infrastructure code, understand why it exists, and extend

it without breaking things

• Strong independent troubleshooting instincts - you investigate first, then bring findings,

not just questions

Bonus Points

• Control Tower, AWS Organizations, or Landing Zone Accelerator experience

• Exposure to regulated environments: CMMC, FedRAMP, IL4/IL5

• Advanced AWS networking: Transit Gateway, peering, private endpoints, hybrid

connectivity, DNS

• GitLab CI/CD pipelines specifically for infrastructure deployment

• Production support experience with alerting and operational dashboards