Senior DevOps Engineer (AWS/Windows)
About The Position
GDIT is seeking a Senior DevOps Engineer to join its National Institute of Allergy and Infectious Diseases (NIAID) team. The role focuses on creating, modifying, automating, and operating AWS infrastructure for Windows-based scientific and business applications, using Terraform and Git-based delivery pipelines. The engineer will help maintain and improve the AWS platform and migrate remaining on-premises Windows workloads to AWS, working with application owners, software developers, and security teams from design through operations. The position supports Windows Server and IIS applications running .NET, and involves infrastructure such as EC2, load balancers, AWS WAF, Route 53, IAM, and TLS certificates. The engineer will automate routine operations, troubleshoot application and infrastructure issues, build observability, remediate vulnerabilities, and contribute to team standards for infrastructure as code and deployments. Occasional after-hours work may be required for planned maintenance or service-impacting outages. The position is remote, with 40 scheduled hours per week and no travel required. The stated likely salary range is $123,250–$166,750, with actual compensation dependent on experience, geographic location, and contractual requirements.
Requirements
- BA/BS and 7 or more years of related IT experience, or equivalent experience, including at least 3 years of hands-on DevOps or cloud engineering in AWS supporting production workloads.
- At least 3 years of experience using Terraform to create, modify, and automate AWS infrastructure, including writing modules, safely changing existing configurations, and managing remote state.
- Experience building and maintaining CI/CD pipelines for infrastructure deployments using GitHub Actions, AWS CodeBuild, or similar tools, with Git branching and pull-request workflows.
- Hands-on experience with EC2, VPC, IAM, S3, Elastic Load Balancing, Route 53, and Systems Manager.
- Experience implementing Amazon CloudWatch monitoring, including metrics, logs, alarms, and dashboards, and collecting Windows and IIS logs and metrics with the CloudWatch agent.
- At least 3 years supporting Windows Server and IIS environments hosting .NET applications, including deployment, configuration, TLS certificates, and troubleshooting.
- Strong PowerShell scripting skills and working knowledge of Python or Bash.
- Ability to work independently on complex problems and communicate clearly with technical and non-technical stakeholders.
- Must be able to obtain and maintain an NIH Public Trust.
Nice To Haves
- Experience migrating Windows and .NET applications from on-premises infrastructure to AWS.
- Experience containerizing applications and running them on Amazon ECS.
- Experience with Application and Network Load Balancers, AWS WAF, CloudFront, and Route 53 routing policies.
- Experience with AWS Secrets Manager or Parameter Store and AWS Certificate Manager, including automated credential and certificate rotation.
- Experience with patch and configuration automation using SSM Patch Manager and State Manager, or PowerShell DSC.
- Datadog experience, including dashboards, SLO design, and alert tuning.
- Experience with additional AWS observability services such as CloudTrail, EventBridge, AWS X-Ray, or CloudWatch Synthetics.
- Familiarity with Amazon RDS for SQL Server from the hosting side, including connectivity, backups, and migrations.
- HashiCorp Terraform Associate, AWS Certified DevOps Engineer – Professional, or AWS Solutions Architect certification.
Responsibilities
- Create, modify, and maintain AWS infrastructure and services in Terraform, including writing modules and configurations, extending existing configurations, and managing state across environments.
- Deliver infrastructure changes through GitHub Actions and AWS CodeBuild pipelines using pull-request review, planning, and consistent deployment practices.
- Build and maintain AWS environments hosting Windows Server and IIS applications running .NET, including EC2, load balancers, AWS WAF, Route 53, IAM, and TLS certificates.
- Migrate on-premises Windows applications to AWS and improve them after migration, including containerizing applications on Amazon ECS where appropriate.
- Automate operational work such as certificate renewal, service-account credential rotation, patching, and service restarts using Terraform, PowerShell, and AWS Systems Manager; create self-service options for application owners where possible.
- Troubleshoot issues across IIS, .NET, networking, and AWS services, addressing root causes through code.
- Build and tune monitoring with Amazon CloudWatch and native AWS observability services, including metrics, logs, alarms, dashboards, and the CloudWatch agent on Windows servers; define service level objectives and alerts.
- Work with the security team to remediate vulnerabilities and apply hardening standards to Windows servers and AWS resources.
- Review teammates’ Terraform and pipeline changes, share practices, and help shape team standards for infrastructure as code and deployments.
Benefits
- Medical plan options, including plans with Health Savings Accounts
- Dental plan options
- Vision plan
- 401(k) plan with company match
- Flexible work weeks where possible
- Paid time off plans, including vacation, sick and personal time
- Paid holidays
- Paid parental leave
- Military, bereavement, and jury duty leave
- Paid Family Leave of up to 160 hours in a rolling 12-month period for eligible employees
- Short- and long-term disability benefits
- Life insurance
- Accidental death and dismemberment insurance
- Personal accident, critical illness, and business travel and accident insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
