DevOps Engineer/ Cloud Engineer (AWS + FedRAMP)

DevOps / Cloud Engineer

Role Summary
We are looking for a DevOps / Cloud Engineer to design, provision, secure, and operate the AWS infrastructure for a predictive cybersecurity platform. The role supports cloud-native deployment, secure networking, CI/CD, observability, signing infrastructure, isolated validation environments, data pipelines, and compliance-grade operational controls.

Key Responsibilities
Provision and manage AWS infrastructure using Terraform, CloudFormation, or similar IaC tools
Design and maintain AWS services including CloudFront, WAF, Cognito/OIDC, ECS/Fargate, ECR, Lambda, Step Functions, EventBridge, S3, RDS PostgreSQL, Kinesis, Glue, Athena, CloudWatch, Config, GuardDuty, Security Hub, KMS, and Secrets Manager
Build secure VPC architecture with private subnets, controlled egress, security groups, least-privilege IAM, encryption, and environment isolation
Set up CI/CD pipelines for frontend, backend, infrastructure, and environment promotion
Implement observability using logs, metrics, traces, alerts, dashboards, audit trails, and operational health monitoring
Support isolated validation environments with replica state, credential isolation, no unintended production write path, and certification evidence
Configure cryptographic key management using KMS, HSM-backed concepts where applicable, signed manifests, key rotation, and secure secret handling
Implement backup, snapshot, rollback, recovery, and disaster-readiness procedures
Align infrastructure with AWS Well-Architected security, reliability, operational excellence, and compliance-oriented controls

Required Skills
Strong AWS DevOps experience across ECS/Fargate, Lambda, Step Functions, EventBridge, S3, RDS, IAM, KMS, VPC, CloudWatch, and security services
Hands-on experience with Terraform or CloudFormation
Experience with containerized deployments, CI/CD automation, Git workflows, release management, and environment promotion
Strong knowledge of VPC design, IAM policies, encryption, secrets management, logging, monitoring, and cloud security operations
Experience with secure SaaS platforms, cybersecurity products, regulated environments, or compliance-heavy workloads is preferred
Familiarity with FedRAMP-aligned controls, multi-account AWS design, incident readiness, and infrastructure auditability is a plus