Senior AWS DevSecOps Engineer

We are seeking a hands-on Senior AWS DevSecOps Engineer to strengthen the security of an existing AWS cloud environment. This individual will review identified security findings, troubleshoot vulnerabilities and configuration issues, and implement effective remediations across AWS services and Kubernetes environments. The ideal candidate has deep experience with AWS, Amazon EKS, Kubernetes, IAM, EC2, and cloud security. This person must be able to quickly understand an established environment, take ownership of security findings, and resolve issues independently with minimal ramp-up or oversight., Review, prioritize, and remediate identified security findings across the AWS environment. Investigate cloud vulnerabilities, configuration gaps, suspicious activity, and overly permissive access. Secure and support AWS services, including IAM, EC2, EKS, VPC, Secrets Manager, GuardDuty, WAF, CloudFront, CloudWatch, S3, and load balancers. Harden Amazon EKS and Kubernetes environments across the control plane, worker nodes, containers, pods, and running workloads. Identify and remediate Kubernetes security risks involving: RBAC and cluster access Service accounts and IAM roles Pod and container security Network policies Secrets management Container images Runtime security Design and maintain IAM roles and policies using least-privilege principles. Investigate and respond to security alerts involving AWS resources, EC2 instances, containers, and Kubernetes workloads. Improve EC2 hardening and patch-management practices while minimizing disruption to production environments. Detect, contain, and remediate compromised workloads within AWS and EKS. Prevent hardcoded credentials and secrets from entering source-code repositories, container images, and deployment workflows. Use AWS Secrets Manager, HashiCorp Vault, or similar solutions to securely manage credentials and sensitive configuration data. Implement or improve security scanning for source code, applications, containers, and cloud infrastructure. Perform root-cause analysis and implement permanent fixes that reduce the likelihood of recurring security issues. Partner with engineering and security teams to validate remediations and document technical decisions. Automate repeatable security controls and remediation activities when appropriate. Independently own security issues from initial investigation through final resolution., AWS Secrets Manager GuardDuty CloudWatch WAF CloudFront Docker Helm Terraform Python Ansible HashiCorp Vault Prisma Cloud Terrascan SonarQube Datadog Prometheus, The successful candidate will be able to: Quickly understand an existing AWS and Kubernetes environment. Take ownership of assigned security findings without extensive guidance. Identify the root cause of cloud and container security issues. Implement practical, secure, and sustainable remediations. Balance security requirements with production stability. Work efficiently in a fast-paced environment. Clearly explain the security risk, the remediation, and how recurrence will be prevented.

Extensive hands-on experience supporting and securing production environments in AWS. Strong experience with Amazon EKS and Kubernetes architecture, administration, security, and troubleshooting. Demonstrated experience remediating AWS and Kubernetes security findings. Deep understanding of AWS Identity and Access Management, including: IAM roles and policies Least-privilege access Cross-account permissions Workload identities Service accounts Secrets access Experience securing and troubleshooting AWS compute and networking services, including EC2, VPC, security groups, load balancers, and S3. Experience with AWS security and monitoring services such as GuardDuty, Secrets Manager, CloudWatch, WAF, and related tools. Strong understanding of Kubernetes security across clusters, nodes, containers, pods, networking, and application workloads. Experience with container security, including image scanning, vulnerability remediation, runtime protection, and incident response. Experience securing credentials and sensitive information using AWS Secrets Manager, HashiCorp Vault, or comparable technologies. Strong understanding of vulnerability management, security hardening, patching, and remediation. Ability to investigate security alerts, identify root causes, and implement permanent corrective actions. Strong troubleshooting and problem-solving skills. Ability to work independently and deliver solutions with minimal technical direction. Preferred Qualifications Experience with Terraform, Python, Ansible, or Shell scripting for cloud automation and remediation. Familiarity with Docker, Helm, Argo CD, Jenkins, GitHub, or Bitbucket. Experience with security tools such as Prisma Cloud, Terrascan, SonarQube, or comparable platforms. Familiarity with SAST, DAST, container scanning, and Infrastructure as Code scanning. Experience supporting multi-account or multi-region AWS environments. Experience with Datadog, Prometheus, or other cloud-monitoring platforms. Knowledge of certificate management, private certificate authorities, and mutual TLS. AWS or Kubernetes certifications. Experience supporting critical applications in enterprise production environments.