Role Description
We are seeking a highly skilled and hands-on DevOps/DevSecOps Engineer to design, implement, and maintain secure, scalable, and highly available infrastructure across AWS and on-premises environments. This role will be responsible for automation, monitoring, security hardening, and disaster recovery, with a strong emphasis on infrastructure-as-code and operational excellence. The ideal candidate is proactive, automation-driven, and comfortable owning both infrastructure and security responsibilities end-to-end.
Key Responsibilities
-
Infrastructure & Automation
-
Design and manage AWS infrastructure using Infrastructure-as-Code (Terraform)
-
Automate configuration management and deployments using Ansible
-
Support hybrid environments (AWS + on-prem data center infrastructure)
-
Build and maintain CI/CD pipelines for application and infrastructure deployments
-
Security & DevSecOps
-
Implement and manage security tools and controls including:
-
AWS GuardDuty, WAF, IDS/IPS (e.g., Fortigate)
-
DLP (Data Loss Prevention) solutions (Macie)
-
Manage secrets using AWS Secrets Manager and HashiCorp Vault
-
Implement and automate certificate lifecycle management (especially on-prem via Ansible)
-
Establish vulnerability management processes and automated reporting (Both AWS and OnPrem)
-
Design and enforce patch management processes across environments (Both AWS and On-Prem)
-
VPN Management (Setup VPN tunnels, Troubleshoot VPN issues)
-
Identity & Access Management
-
Integrate and manage SSO solutions (Okta)
-
Enforce least privilege access controls across systems using IAM roles
-
Disaster Recovery & Business Continuity
-
Design and implement disaster recovery (DR) strategies
-
Conduct DR testing and ensure RTO/RPO objectives are met
-
Monitoring, Alerting & Reliability
-
Implement and manage monitoring/alerting using tools such as CloudWatch/NewRelic
-
Ensure system availability and performance
-
Set up proactive alerting for applications, APIs, and infrastructure
-
Lead incident response and root cause analysis
Qualifications
-
Strong hands-on experience with AWS (ECS, networking, security, cloud watch, Aurora RDS)
-
Expertise in Terraform (infrastructure provisioning at scale)
-
Experience with Ansible for automation and configuration management
-
Experience with monitoring tools such as New Relic and CloudWatch
-
Strong understanding of security best practices in cloud and hybrid environments
-
Experience with:
-
AWS Secrets Manager
-
HashiCorp Vault
-
Ansible automation
-
Hands-on experience with:
-
WAF, IDS/IPS, GuardDuty, Fortigate (or similar)
-
Vulnerability management and patching processes (Nessus Pro)
-
Experience implementing SSO solutions (Okta)
-
Familiarity with DLP tools and implementations
Requirements
-
Proficiency in Python and Java
-
Strong scripting skills (Bash or similar)
Nice-to-Have
-
Experience in healthcare or compliance-driven environments (HIPAA, SOC 2, HITRUST)
-
Experience with containerization (Docker, ECS)
-
Experience with SIEM tools and centralized logging
Key Traits
-
Hands-on and execution-focused (not just architectural)
-
Strong automation mindset
-
Security-first approach (DevSecOps mentality)
-
Ability to work across teams (Development, Operations, Security)
-
Comfortable working in both cloud and on-prem environments