Senior AWS DevSecOps / Platform Engineer

Select Source Solutions•Greenbelt, MD

1d•Remote

About The Position

Our client is seeking a remote, senior, hands-on engineer to build, secure, and operate a mission-critical cloud platform supporting high-availability scientific and operational workloads. The role owns production AWS infrastructure from Infrastructure as Code through deployment, validation, monitoring, and ongoing operations. The environment uses AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps, with emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration. The engineer will join a small, experienced team and have meaningful ownership and influence over platform architecture, security, automation, and engineering standards.

Requirements

7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments.
Deep hands-on Terraform experience, including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift.
Strong hands-on AWS engineering experience supporting production workloads.
Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services.
Hands-on experience operating Kubernetes and Amazon EKS in production, beyond deploying applications to an existing cluster.
Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management.
Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform.
Experience engineering CI/CD pipelines; GitLab CI/CD is strongly preferred.
Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code.
Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes.
Experience supporting secure, highly available cloud infrastructure.
Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF, including familiarity with requirements supporting an Authority to Operate.
Strong troubleshooting, documentation, and communication skills.
Ability to mentor engineers and provide senior technical leadership.
U.S. Person with the ability to obtain and maintain a Public Trust.
Ability to obtain and maintain a security clearance.

Nice To Haves

Experience designing or operating multi-account AWS environments, AWS Organizations, Control Tower, or federal cloud landing zones.
Experience with AWS GovCloud or FedRAMP environments.
Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer.
Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies.
Experience with Docker and secure container build practices.
Experience with serverless AWS technologies such as Lambda.
Experience with real-time or event-driven data-processing architectures.
AWS certification such as Solutions Architect, DevOps Engineer, or Developer.
Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems.
Familiarity with scientific data formats such as NetCDF or GRIB.

Responsibilities

Design, build, maintain, and improve production AWS infrastructure across multiple environments.
Develop and maintain reusable Terraform modules and Infrastructure as Code for provisioning and managing cloud infrastructure.
Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code.
Operate and maintain production Amazon EKS environments, including networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing.
Design and support Kubernetes workloads using Helm and modern container orchestration practices.
Build and maintain GitOps deployment workflows using Argo CD, Flux, or comparable technologies.
Develop and harden GitLab CI/CD pipelines for infrastructure and application delivery.
Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation.
Implement policy-as-code technologies such as OPA, Conftest, or comparable tools.
Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation.
Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity.
Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity.
Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies.
Support development and evolution of multi-account AWS environments and federal landing-zone architectures.
Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices.
Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities.
Develop and maintain technical evidence and documentation supporting security controls and compliance reviews.
Implement monitoring, logging, alerting, and observability using Amazon CloudWatch, Grafana, or comparable platforms.
Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues.
Mentor engineers and help establish strong practices for code review, change management, automation, testing, and technical documentation.
Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services.