AWS DevOps/Security Engineer Senior/Architect

Cybersecurity Jobs; Dallas (TX); Remote; USD 140,000 - 190,000; Full time

Job summary

Cybersecurity Jobs is seeking a Senior AWS DevOps/Security Engineer (Senior/Architect) to design, secure, automate, operate, and support AWS platforms for complex modernization and migration programs. You will own cross-account IAM policies, build private connectivity, and lead governance, cost controls, and readiness across DEV to DR environments.

The role requires deep AWS expertise, IaC proficiency (Terraform preferred), and strong scripting in Python/PowerShell/Bash.

Qualifications

• 8+ years of hands-on AWS cloud engineering, DevOps, platform engineering, or cloud security experience.
• Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity.
• Experience operating private, regulated, or enterprise AWS environments.
• Strong infrastructure-as-code experience with Terraform; CloudFormation or AWS CDK beneficial.
• Experience with GitHub Actions or comparable CI/CD platforms.
• Proficiency with AWS CLI, Linux, Python, PowerShell, and Bash automation.
• Understanding of identity federation (SAML/OIDC), secrets management, certificates, encryption, and least-privilege access.
• Ability to troubleshoot across cloud infrastructure, networking, security, application, and on-premises boundaries.
• Experience with monitoring, incident response, change management, and production operations.

Responsibilities

• Design, build, and operate AWS environments across DEV, TEST, UAT, PROD, and DR.
• Manage AWS accounts, governance, tagging, cost controls, and environment readiness.
• Implement private networking with VPC, PrivateLink, DNS, and private connectivity.
• Coordinate enterprise integrations with networks, firewalls, Netskope, and on-prem systems.
• Build and support core AWS services: EC2, S3, RDS, MWAA, Lambda, Route 53, Secrets Manager, Systems Manager.
• Own IAM design including cross-account access and permission policies.
• Strengthen security/compliance with KMS, encryption, and vulnerability remediation.
• Automate infrastructure using Terraform, CloudFormation, AWS CLI; develop Python/PowerShell/Bash scripts.
• Deliver GitHub-based CI/CD pipelines and automated validation with security checks.

Skills

AWS

DevOps

Security engineering

IAM

IaC

CI/CD

Observability

Networking

Least-privilege access

Automation

Tools

Terraform

CloudFormation

AWS CDK

AWS CLI

Python

PowerShell

Bash

GitHub Actions

GitHub-based CI/CD pipelines

EC2

S3

RDS

MWAA/Airflow

Lambda

VPC

KMS

CloudTrail

Job description

Senior AWS DevOps/Security Engineer (Senior/Architect) role for building, securing, automating, operating, and supporting AWS platforms for HMS Modernization and Teradata Migration programs.

• Design, build, and operate AWS environments across DEV, TEST, UAT, PROD, and DR
• Manage AWS accounts and governance including service quotas, resource governance, tagging, cost controls, and environment readiness
• Implement private networking with private VPC/spoke architecture, subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity
• Coordinate enterprise integrations with corporate networks, firewalls, Netskope, on-premises systems, and shared AWS network services
• Build and support core AWS services including EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, Systems Manager, and related services
• Own IAM design for roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access
• Strengthen security and compliance with KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and compliance controls
• Automate infrastructure using Terraform (primary), plus CloudFormation where appropriate, AWS CLI, Python, PowerShell, and Bash
• Deliver GitHub-based CI/CD pipelines for infrastructure and application deployments
• Implement delivery safeguards such as automated validation, security scanning, policy checks, approval gates, release controls, and rollback procedures
• Operate with observability via CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alarms, dashboards, and centralized monitoring
• Support platform components including AWS MWAA/Airflow, RDS PostgreSQL, S3 landing zones, bastion services, and private application access
• Troubleshoot complex issues across IAM, KMS, DNS, routing, firewall rules, endpoints, Linux, EC2, databases, and managed services
• Perform architecture and readiness activities including architecture reviews, cost optimization, capacity planning, disaster recovery planning, and production-readiness assessments
• Produce operational artifacts such as architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation
• Participate in production operations including support coverage, incident response, root-cause analysis, and service improvement

Requirements

• 8+ years of hands-on AWS cloud engineering, DevOps, platform engineering, or cloud security experience
• Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity
• Experience operating private, regulated, or enterprise AWS environments
• Strong infrastructure-as-code experience with Terraform; CloudFormation or AWS CDK experience is beneficial
• Experience with GitHub Actions or comparable CI/CD platforms
• Proficiency with AWS CLI, Linux, Python, PowerShell, and Bash automation
• Understanding of identity federation (SAML/OIDC), secrets management, certificates, encryption, and least-privilege access
• Ability to troubleshoot across cloud infrastructure, networking, security, application, and on-premises boundaries
• Experience with monitoring, incident response, change management, and production operations

Technologies

• AWS
• Terraform
• AWS CloudFormation
• AWS CDK
• AWS CLI
• Python
• PowerShell
• Bash
• GitHub Actions
• GitHub-based CI/CD pipelines
• EC2
• S3
• RDS
• MWAA
• Airflow
• Lambda
• ALB/NLB
• Cognito
• Route 53
• Secrets Manager
• Systems Manager
• IAM
• KMS
• CloudTrail
• CloudWatch
• VPC Flow Logs
• AWS Config
• SNS
• VPC endpoints
• PrivateLink
• Cloud WAN
• DNS
• Private connectivity
• Private VPC/spoke architecture
• Linux
• SAML/OIDC
• Private application access
• AWS MWAA/Airflow
• RDS PostgreSQL
• Identity federation
• Certificate management

Preferred

• AWS Solutions Architect, DevOps Engineer, Security, or Advanced Networking certification
• Experience with AWS MWAA, Airflow, Cognito, RDS PostgreSQL, Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS
• Experience supporting healthcare, government, or other regulated workloads

Location: Dallas, TX (remote)

Experience: 8+ years