DevOps Engineer / Cloud Platform Engineer

Design, build, and maintain scalable AWS cloud infrastructure. Develop reusable Terraform modules and manage Terraform state. Build and maintain CI/CD pipelines using GitHub Actions and/or Jenkins. Implement Infrastructure as Code validation, testing, governance, and deployment controls. Implement Policy as Code using HashiCorp Sentinel and/or Open Policy Agent (OPA). Develop automated policies for IAM, encryption, network security, tagging, public exposure, logging, and approved AWS services. Integrate security and compliance checks into CI/CD pipelines. Implement preventive and detective security controls across AWS environments. Automate validation of Terraform plans before deployment. Implement and manage AWS security services including IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, CloudWatch, and AWS Organizations. Support multi-account AWS environments and enterprise landing zones. Automate compliance monitoring and remediation. Translate security and governance requirements into enforceable technical controls. Support controls aligned with NIST, CIS, and AWS security best practices. Troubleshoot infrastructure, deployment, security, and pipeline issues. Collaborate with Cloud Architecture, Security, Development, and Operations teams.

We are seeking an experienced DevOps Engineer / Cloud Platform Engineer with strong hands-on expertise in AWS, Terraform, CI/CD, Policy as Code, and cloud security.

The ideal candidate will have experience designing and automating secure AWS infrastructure, developing reusable Terraform modules, implementing CI/CD pipelines, and enforcing security and compliance controls through automated policies., Strong hands-on experience with AWS. Strong experience with Terraform / Terraform Enterprise / HCP Terraform. Experience developing reusable Terraform modules and managing state. Strong Infrastructure as Code experience. Experience with GitHub Actions and/or Jenkins. Hands-on experience with Policy as Code. Experience with HashiCorp Sentinel and/or OPA. Strong understanding of AWS IAM, networking, encryption, logging, monitoring, and security. Experience implementing security controls within automated deployment pipelines. Knowledge of NIST and CIS security frameworks. Strong scripting experience with Python, Bash, or PowerShell. Understanding of Docker and Kubernetes/cloud-native environments. Strong Git/GitHub/GitLab experience. Preferred Skills AWS Organizations AWS Control Tower AWS Service Control Policies (SCP) AWS Config Rules AWS Security Hub AWS GuardDuty Kubernetes / EKS Docker HashiCorp Vault Secrets Management SAST / DAST / Dependency Scanning Container Security Enterprise Cloud Landing Zones Regulated enterprise / financial services experience Ideal Candidate

The ideal candidate understands the complete cloud infrastructure lifecycle:

Code * Terraform * CI/CD * Policy Validation * Security Controls * Deployment * Continuous Compliance

Candidates should have hands-on implementation experience, not just keyword-level exposure to Policy as Code or cloud security.

Strong preference for candidates who have implemented Sentinel/OPA policies with Terraform and integrated security governance into CI/CD pipelines.