> Markdown version of [/jobs/ext/2986648-devops-engineer-cloud-platform-engineer](https://www.wearedevelopers.com/jobs/ext/2986648-devops-engineer-cloud-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DevOps Engineer / Cloud Platform Engineer - **Company:** Bright Sol - **Location:** New York, NY, United States - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Bash Shell, Cloud Computing, Cloud Computing Security, Cloud Engineering, Continuous Integration, DevOps, Github, Identity and Access Management, Python (Programming Language), Key Management, Network Security, Windows PowerShell, Policy as Code, Data Logging, Scripting, Cloud Platform System, HybridCloud, Gitlab, Kubernetes, Deployment Automation, Hashicorp, Opsworks, Cloudwatch, Terraform, Docker, Jenkins, Static Application Security Testing, Dynamic Application Security Testing - **Published:** September 18, 2026 - **Apply:** https://www.dice.com/job-detail/22e3ee95-2af9-44c4-adef-cd1220f3ca0b ## About the Role We are seeking an experienced DevOps Engineer / Cloud Platform Engineer with strong hands-on expertise in AWS, Terraform, CI/CD, Policy as Code, and cloud security. The ideal candidate will have experience designing and automating secure AWS infrastructure, developing reusable Terraform modules, implementing CI/CD pipelines, and enforcing security and compliance controls through automated policies., Strong hands-on experience with AWS. Strong experience with Terraform / Terraform Enterprise / HCP Terraform. Experience developing reusable Terraform modules and managing state. Strong Infrastructure as Code experience. Experience with GitHub Actions and/or Jenkins. Hands-on experience with Policy as Code. Experience with HashiCorp Sentinel and/or OPA. Strong understanding of AWS IAM, networking, encryption, logging, monitoring, and security. Experience implementing security controls within automated deployment pipelines. Knowledge of NIST and CIS security frameworks. Strong scripting experience with Python, Bash, or PowerShell. Understanding of Docker and Kubernetes/cloud-native environments. Strong Git/GitHub/GitLab experience. Preferred Skills AWS Organizations AWS Control Tower AWS Service Control Policies (SCP) AWS Config Rules AWS Security Hub AWS GuardDuty Kubernetes / EKS Docker HashiCorp Vault Secrets Management SAST / DAST / Dependency Scanning Container Security Enterprise Cloud Landing Zones Regulated enterprise / financial services experience Ideal Candidate The ideal candidate understands the complete cloud infrastructure lifecycle: Code * Terraform * CI/CD * Policy Validation * Security Controls * Deployment * Continuous Compliance Candidates should have hands-on implementation experience, not just keyword-level exposure to Policy as Code or cloud security. Strong preference for candidates who have implemented Sentinel/OPA policies with Terraform and integrated security governance into CI/CD pipelines. ## Description Design, build, and maintain scalable AWS cloud infrastructure. Develop reusable Terraform modules and manage Terraform state. Build and maintain CI/CD pipelines using GitHub Actions and/or Jenkins. Implement Infrastructure as Code validation, testing, governance, and deployment controls. Implement Policy as Code using HashiCorp Sentinel and/or Open Policy Agent (OPA). Develop automated policies for IAM, encryption, network security, tagging, public exposure, logging, and approved AWS services. Integrate security and compliance checks into CI/CD pipelines. Implement preventive and detective security controls across AWS environments. Automate validation of Terraform plans before deployment. Implement and manage AWS security services including IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, CloudWatch, and AWS Organizations. Support multi-account AWS environments and enterprise landing zones. Automate compliance monitoring and remediation. Translate security and governance requirements into enforceable technical controls. Support controls aligned with NIST, CIS, and AWS security best practices. Troubleshoot infrastructure, deployment, security, and pipeline issues. Collaborate with Cloud Architecture, Security, Development, and Operations teams. ## Related Videos - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)