DevOps Engineer

Decca Recruiting LLC

Norwalk (CT)

On-site

USD 120,000 - 180,000

Full time

24 hours ago
Be an early applicant
Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Decca Recruiting LLC is seeking a hands-on DevOps/Platform Engineer to own AWS-based infrastructure and CI/CD for a multi-account environment. You will implement IaC with AWS CDK, automate security and compliance, and enhance observability across production services.

You will collaborate on identity management, access controls, and internal tooling, with on-call duties and a focus on reliable, scalable systems using TypeScript/Python and GitHub Actions/CodePipeline.

Qualifications

  • 4+ years in DevOps, SRE, platform, or cloud infrastructure engineering.
  • Deep, hands-on AWS experience with IAM, VPC, and cross-account access.
  • Real Infrastructure-as-Code experience; AWS CDK strongly preferred.
  • Production coding in TypeScript and/or Python.
  • CI/CD pipeline ownership using GitHub Actions or CodePipeline.
  • Containers on AWS: ECS or EKS, ECR, config management.
  • Linux administration and shell scripting.
  • Identity systems and least-privilege practices.
  • Clear written communication for runbooks and incident notes.

Responsibilities

  • Build and maintain our IaC estate across multiple accounts.
  • Own production services: ECS/Fargate, Lambda, API Gateway, OpenSearch.
  • Improve observability with CloudWatch, logs, and canaries.
  • Automate security/compliance with guardrails and SOC2-focused tooling.
  • Manage access: SSO/SAML, SCIM provisioning, VPN access.
  • Develop internal tooling, including chat-native bots and dashboards.
  • Enhance CI/CD workflows and deployment safety features.
  • Participate in on-call rotations for production infrastructure.

Skills

DevOps
AWS
IaC expertise
Production coding
CI/CD ownership
Linux administration
Identity systems
Written communication

Tools

AWS CDK
Terraform/CFN
GitHub Actions
CodePipeline
ECS/EKS

Job description

  • Build and maintain our IaC estate: We run a fleet of TypeScript AWS CDK repos (one per platform: message bus, SFTP exchange, OpenSearch, org policies, and more) deploying via CodePipeline into a dozen+ accounts. You'll extend existing stacks, split monoliths apart cleanly, and bootstrap new accounts into the pattern.
  • Own production services: ECS Fargate behind ALBs, Aurora, Lambda, API Gateway, S3, AWS Transfer Family for partner SFTP, OpenSearch, DMS replication. Deploy, monitor, right-size, and debug them.
  • Make observability actually catch things: CloudWatch alarms, Synthetics canaries, VPC flow logs, CloudTrail, log retention and redaction policies. We care about the difference between an alarm that exists and an alarm that pages someone.
  • Automate security and compliance: Service Control Policies as guardrails, IAM Identity Center permission sets, Prowler-driven evidence collection into WORM storage for SOC 2, secret scanning and SAST in PR pipelines. You'll help move controls from "reviewed quarterly" to "enforced continuously."
  • Run access management as a product: Okta SSO/SAML, SCIM provisioning, our OpenVPN Access Server fleet, and the approval-gated automation that provisions VPN and AWS access from a Jira ticket or a chat command.
  • Build internal tooling: A lot of our ops surface is chat-native: Google Chat bots and webhooks that review PRs, report compliance drift, page on-call, and provision access. Several are LLM-backed on Amazon Bedrock. You'll ship these, not just consume them.
  • Improve CI/CD: GitHub Actions workflows, PR gates, org rulesets, auto-merge policy, deployment safety (changeset previews before anything touches prod).
  • On-call rotation: Participate in on-call for production infrastructure.
Qualifications
  • 4+ years in DevOps, SRE, platform, or cloud infrastructure engineering.
  • Deep, hands-on AWS: You can reason about IAM trust policies, VPC networking, and cross-account access without a diagram.
  • Real Infrastructure-as-Code experience: AWS CDK strongly preferred; Terraform/CloudFormation background transfers fine, but you'll be writing TypeScript CDK here.
  • Production Coding: Comfortable writing production code, not just config (TypeScript and/or Python).
  • CI/CD Pipeline Ownership: GitHub Actions, CodePipeline, or equivalent.
  • Containers on AWS: ECS or EKS, image builds, ECR, task/service configuration.
  • Linux Administration: Shell fluency; comfortable on a box with systemctl, journalctl, and no GUI.
  • Identity Systems: SSO/SAML/OIDC, IAM roles vs. users, least privilege in practice.
  • Clear Written Communication: Our runbooks, PR descriptions, and incident notes are how the team scales.
Optional Qualifications
  • Healthcare, fintech, or another regulated environment; HIPAA or SOC 2 audit experience.
  • AWS Organizations at scale: SCPs, Control Tower, Identity Center, multi-account CDK bootstrapping.
  • Data platform exposure: Glue, Athena, QuickSight, Lake Formation, DMS.
  • Amazon Bedrock or other LLM API work—we build with Claude and are actively expanding internal AI tooling.
  • Windows Server administration via SSM (a slice of our analytics estate is Windows).
  • OpenVPN Access Server, Cloudflare, Route 53 at an operational level.
  • Next.js / React—several internal dashboards are full-stack and you'd own them soup to nuts.
Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

DevOps Engineer
DevOps Engineer

Decca Consulting • Norwalk (CT)

On-site
USD 120,000 - 180,000
Health insurance
Paid time off
Competitive salary
AWS DevOps Engineer
AWS DevOps Engineer

Decca Consulting LLC • Norwalk (CT)

On-site
USD 120,000 - 160,000
Senior Devops Engineer (AWS)
Senior Devops Engineer (AWS)

Read-A-Thon • United States

On-site
USD 120,000 - 170,000
Senior Software Engineer, Platform (Developer Experience)
Senior Software Engineer, Platform (Developer Experience)

Ecp123 • Chicago (IL), Northern (KY)

Hybrid
USD 140,000 - 210,000
DevOps Engineer DevOps Engineer
DevOps Engineer DevOps Engineer

Kurai • Seattle (WA)

On-site
USD 120,000 - 180,000
DevOps Engineer
DevOps Engineer

duPont REGISTRY • Miami (FL)

On-site
USD 120,000 - 180,000
Cloud Architect
Cloud Architect

Pentangle Tech Services | P5 Group • Illinois

On-site
USD 120,000 - 180,000
DevOps Engineer
DevOps Engineer

Motorsport Network, LLC • Miami (FL)

On-site
USD 120,000 - 180,000
Platform Engineer - Site Reliability
Platform Engineer - Site Reliability

Auto Hauler Exchange • Rochester (MI)

On-site
USD 120,000 - 160,000
Cloud Engineer
Cloud Engineer

Gotham Technology Group • United States

On-site
USD 120,000 - 160,000