DevSecOps Engineer

Eon; Denver (CO); On-site; USD 95,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Referral bonuses

Vacation time

Maternity/Paternity leave

Career growth

Job summary

EON in Colorado is seeking a DevSecOps Engineer to secure, automate, and optimize AWS cloud infrastructure across client implementations and production environments.

The role focuses on infrastructure monitoring, alerting, and observability, with cross‑functional collaboration to improve reliability, security posture, and cost efficiency.

Strong hands-on AWS, DevOps, and security experience are required, along with the ability to document findings and drive repeatable improvements.

Qualifications

• Hands-on experience supporting AWS cloud infrastructure in production or client-facing environments.
• Demonstrated experience with DevOps operations, deployment support, monitoring, and troubleshooting.
• Experience with observability tools such as Prometheus, Grafana, CloudWatch, or equivalent platforms.
• Experience with security monitoring, SIEM review, vulnerability remediation, or secure cloud configuration.
• Working knowledge of core AWS services, IAM, networking, and least-privilege practices.
• Ability to troubleshoot across infrastructure, applications, deployments, and security tooling.
• Strong written and verbal communication skills, with the ability to document issues and explain technical findings to cross‑functional audiences.

Responsibilities

• Own end-to-end monitoring and alerting across supported AWS environments using Prometheus, Grafana, CloudWatch, and related tools.
• Configure, tune, and maintain alerts to reduce noise, close coverage gaps, and keep notifications actionable.
• Investigate and respond to infrastructure alerts, performance issues, and availability concerns.
• Maintain dashboards and observability views used by internal teams to assess environment health.
• Support incident investigation and root cause analysis using monitoring data, logs, and metrics.
• Define monitoring standards and alerting expectations across client and internal environments.
• Support AWS infrastructure across client, internal, and production environments.
• Build, configure, and validate dedicated cloud resources for client implementation and onboarding.
• Provide L1/L2 escalation support for infrastructure, deployment, and environment issues.
• Support CI/CD workflows, deployment automation, and repeatable operational processes.
• Drive reliability, scalability, and operational consistency improvements.
• Lead AWS cost management efforts including resource cleanup, right-sizing, and usage optimization.
• Maintain runbooks, documentation, and operational procedures for recurring workflows.
• Monitor SIEM and security tooling; triage, investigate, and elevate security events.
• Review infrastructure and deployment configurations for security risks.
• Apply least-privilege principles to IAM, access control, and cloud resource configuration.
• Support vulnerability remediation and risk reduction efforts.
• Ensure logging, monitoring, and alerting cover security-relevant activity.
• Collaborate with engineering, implementation, and support teams on security findings and secure deployment practices.

Skills

AWS Cloud

DevOps

Observability

Security Monitoring

IAM & Networking

Troubleshooting

Communication

Tools

Prometheus

Grafana

CloudWatch

Job description

Role Summary - US-based required, Denver-based preferred

The DevSecOps Engineer supports, secures, automates, and optimizes AWS cloud infrastructure across internal systems, client implementations, and production environments. The role combines DevOps engineering with security operations, focusing on infrastructure reliability, observability, deployment support, security visibility, and cost optimization.

A primary responsibility is owning infrastructure monitoring and alerting across supported environments - maintaining visibility into system health, improving alert quality, responding to incidents, and ensuring teams have the observability needed for reliable operations. The engineer also serves as a technical escalation point for infrastructure, deployment, and security issues, working cross-functionally with implementation, engineering, support, and leadership teams.

Core Responsibilities

Infrastructure Monitoring & Alerting (Primary Ownership)

• Own end-to-end monitoring and alerting across supported AWS environments using Prometheus, Grafana, CloudWatch, and related tools.
• Configure, tune, and maintain alerts to reduce noise, close coverage gaps, and keep notifications actionable.
• Investigate and respond to infrastructure alerts, performance issues, and availability concerns.
• Maintain dashboards and observability views used by internal teams to assess environment health.
• Support incident investigation and root cause analysis using monitoring data, logs, and metrics.
• Define monitoring standards and alerting expectations across client and internal environments.

DevOps & Cloud Infrastructure

• Support AWS infrastructure across client, internal, and production environments.
• Build, configure, and validate dedicated cloud resources for client implementation and onboarding.
• Provide L1/L2 escalation support for infrastructure, deployment, and environment issues.
• Support CI/CD workflows, deployment automation, and repeatable operational processes.
• Drive reliability, scalability, and operational consistency improvements.
• Lead AWS cost management efforts including resource cleanup, right-sizing, and usage optimization.
• Maintain runbooks, documentation, and operational procedures for recurring workflows.

Security Operations / DevSecOps

• Monitor SIEM and security tooling; triage, investigate, and elevate security events.
• Review infrastructure and deployment configurations for security risks.
• Apply least-privilege principles to IAM, access control, and cloud resource configuration.
• Support vulnerability remediation and risk reduction efforts.
• Ensure logging, monitoring, and alerting cover security-relevant activity.
• Collaborate with engineering, implementation, and support teams on security findings and secure deployment practices.

Level Expectations

This role operates with independent ownership and technical judgment, particularly across monitoring, alerting, troubleshooting, and operational visibility. The engineer is expected to:

• Independently investigate and resolve complex infrastructure, deployment, and monitoring issues.
• Make technical decisions that balance reliability, security, cost, and operational impact.
• Support multiple client and internal environments with minimal supervision.
• Act as a technical escalation point across infrastructure and security domains.
• Identify risks, gaps, and monitoring blind spots before they become operational issues.
• Improve systems through automation, documentation, and process refinement.

Qualifications

Required

• Hands-on experience supporting AWS cloud infrastructure in production or client-facing environments.
• Demonstrated experience with DevOps operations, deployment support, monitoring, and troubleshooting.
• Experience with observability tools such as Prometheus, Grafana, CloudWatch, or equivalent platforms.
• Experience with security monitoring, SIEM review, vulnerability remediation, or secure cloud configuration.
• Working knowledge of core AWS services, IAM, networking, and least-privilege practices.
• Ability to troubleshoot across infrastructure, applications, deployments, and security tooling.
• Strong written and verbal communication skills, with the ability to document issues and explain technical findings to cross‑functional audiences.

Preferred

• CI/CD pipelines and deployment automation.
• Infrastructure-as-code (Terraform, CloudFormation, or AWS CDK).
• Containerized workloads (Docker, ECS, Kubernetes).
• AWS security services (GuardDuty, Security Hub, IAM Access Analyzer, AWS Config, CloudTrail, WAF, Inspector).
• Vulnerability scanning, SIEM workflows, and alert triage.
• Multi-client, single‑tenant, or dedicated client cloud environments.
• AWS cost optimization and resource right‑sizing.
• Operational documentation, runbooks, and automation scripting.

Preferred Certifications

• AWS Certified Solutions Architect
• AWS Certified SysOps Administrator
• AWS Certified Developer
• AWS Certified Security – Specialty
• AWS Certified DevOps Engineer – Professional
• CompTIA Security+
• CompTIA Network+

Success Criteria

Success is measured by improvements in infrastructure visibility, alerting effectiveness, operational reliability, security posture, and cloud cost efficiency. Key outcomes include:

• Strong ownership of monitoring and alerting across supported environments.
• Higher alert quality, reduced noise, better coverage, faster actionability.
• Faster detection, investigation, and escalation of infrastructure and security issues.
• Improved reliability and consistency of client and internal deployments.
• Stronger security visibility through SIEM monitoring and secure configuration practices.
• Measurable reduction in AWS infrastructure costs through optimization efforts.
• Increased automation and documentation supporting repeatable operations.
• Effective cross‑functional support to implementation, engineering, and support teams.

“So what’s in it for me,” you ask?

We pride ourselves for being a culture-based company buzzing with high-energy. Aside from the enthusiastic environment, you’ll enjoy:

• Competitive salary
• Health insurance
• Referral bonuses
• Vacation time
• Paid Maternity and Paternity leave
• Professional development and career growth opportunities
• Awesome team members

The pay range for this position in Colorado is $X95,000 - $110,000 (yr base pay); however, base pay offered may vary depending on job-related knowledge, skills, and experience. This information is provided per the Colorado Equal Pay Act. Base (CEPA) pay information is based on market location.

EON is proud to be an equal opportunity employer and prohibits discrimination and harassment of any kind. Our culture celebrates diversity and we are committed to creating an inclusive environment for all team members.