DevSecOps Engineer

eonhealth; Denver (CO); On-site; USD 66,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Vacation time

Paid maternity/paternity leave

Referral bonuses

Job summary

EON is seeking a DevSecOps Engineer to secure, automate, and optimize AWS cloud infrastructure across client implementations and production environments. You will own monitoring, alerting, and observability, and work with cross-functional teams to ensure reliable, secure deployments.

The role emphasizes incident response, cost optimization, and security-focused deployment practices, with collaboration across engineering, implementation, and support teams.

Qualifications

• Hands-on experience supporting AWS cloud infrastructure in production or client-facing environments.
• Experience with observability tools such as Prometheus, Grafana, CloudWatch, or equivalent platforms.
• Working knowledge of IAM, networking, and least-privilege practices.
• Strong written and verbal communication skills, with ability to document issues and explain technical findings to cross-functional audiences.

Responsibilities

• Own end-to-end monitoring and alerting across AWS environments using Prometheus, Grafana, CloudWatch, and related tools.
• Tune alerts to reduce noise and improve actionability.
• Investigate infrastructure alerts and performance issues; support incident response and RCA.
• Maintain dashboards and observability views for health metrics used by internal teams.
• Provide L1/L2 escalation support for infrastructure, deployment, and environment issues.
• Lead cost management efforts and optimize AWS resource usage.
• Document runbooks and operational procedures for recurring workflows.

Skills

AWS

DevOps

Observability

SIEM

IAM

Troubleshooting

Communication

Tools

Prometheus

Grafana

CloudWatch

Terraform

CloudFormation

AWS CDK

Docker

Kubernetes

GuardDuty

Job description

Role Summary - US-based required, Denver-based preferred

The DevSecOps Engineer supports, secures, automates, and optimizes AWS cloud infrastructure across internal systems, client implementations, and production environments. The role combines DevOps engineering with security operations, focusing on infrastructure reliability, observability, deployment support, security visibility, and cost optimization.

A primary responsibility is owning infrastructure monitoring and alerting across supported environments - maintaining visibility into system health, improving alert quality, responding to incidents, and ensuring teams have the observability needed for reliable operations. The engineer also serves as a technical escalation point for infrastructure, deployment, and security issues, working cross-functionally with implementation, engineering, support, and leadership teams.

Core Responsibilities

Infrastructure Monitoring & Alerting (Primary Ownership)

• Own end-to-end monitoring and alerting across supported AWS environments using Prometheus, Grafana, CloudWatch, and related tools.
• Configure, tune, and maintain alerts to reduce noise, close coverage gaps, and keep notifications actionable.
• Investigate and respond to infrastructure alerts, performance issues, and availability concerns.
• Maintain dashboards and observability views used by internal teams to assess environment health.
• Support incident investigation and root cause analysis using monitoring data, logs, and metrics.
• Define monitoring standards and alerting expectations across client and internal environments.

DevOps & Cloud Infrastructure

• Support AWS infrastructure across client, internal, and production environments.
• Build, configure, and validate dedicated cloud resources for client implementation and onboarding.
• Provide L1/L2 escalation support for infrastructure, deployment, and environment issues.
• Support CI/CD workflows, deployment automation, and repeatable operational processes.
• Drive reliability, scalability, and operational consistency improvements.
• Lead AWS cost management efforts including resource cleanup, right-sizing, and usage optimization.
• Maintain runbooks, documentation, and operational procedures for recurring workflows.

Security Operations / DevSecOps

• Monitor SIEM and security tooling; triage, investigate, and elevate security events.
• Review infrastructure and deployment configurations for security risks.
• Apply least-privilege principles to IAM, access control, and cloud resource configuration.
• Support vulnerability remediation and risk reduction efforts.
• Ensure logging, monitoring, and alerting cover security-relevant activity.
• Collaborate with engineering, implementation, and support teams on security findings and secure deployment practices.

Level Expectations

This role operates with independent ownership and technical judgment, particularly across monitoring, alerting, troubleshooting, and operational visibility. The engineer is expected to:

• Independently investigate and resolve complex infrastructure, deployment, and monitoring issues.
• Make technical decisions that balance reliability, security, cost, and operational impact.
• Support multiple client and internal environments with minimal supervision.
• Act as a technical escalation point across infrastructure and security domains.
• Identify risks, gaps, and monitoring blind spots before they become operational issues.
• Improve systems through automation, documentation, and process refinement.

Qualifications

Required

• Hands-on experience supporting AWS cloud infrastructure in production or client-facing environments.
• Demonstrated experience with DevOps operations, deployment support, monitoring, and troubleshooting.
• Experience with observability tools such as Prometheus, Grafana, CloudWatch, or equivalent platforms.
• Experience with security monitoring, SIEM review, vulnerability remediation, or secure cloud configuration.
• Working knowledge of core AWS services, IAM, networking, and least-privilege practices.
• Ability to troubleshoot across infrastructure, applications, deployments, and security tooling.
• Strong written and verbal communication skills, with the ability to document issues and explain technical findings to cross-functional audiences.

Preferred

• CI/CD pipelines and deployment automation.
• Infrastructure-as-code (Terraform, CloudFormation, or AWS CDK).
• Containerized workloads (Docker, ECS, Kubernetes).
• AWS security services (GuardDuty, Security Hub, IAM Access Analyzer, AWS Config, CloudTrail, WAF, Inspector).
• Vulnerability scanning, SIEM workflows, and alert triage.
• Multi-client, single-tenant, or dedicated client cloud environments.
• AWS cost optimization and resource right-sizing.
• Operational documentation, runbooks, and automation scripting.

Preferred Certifications

• AWS Certified Solutions Architect
• AWS Certified SysOps Administrator
• AWS Certified Developer
• AWS Certified Security – Specialty
• AWS Certified DevOps Engineer – Professional
• CompTIA Security+
• CompTIA Network+

Success Criteria

• Strong ownership of monitoring and alerting across supported environments.
• Higher alert quality, reduced noise, better coverage, faster actionability.
• Faster detection, investigation, and escalation of infrastructure and security issues.
• Improved reliability and consistency of client and internal deployments.
• Stronger security visibility through SIEM monitoring and secure configuration practices.
• Measurable reduction in AWS infrastructure costs through optimization efforts.
• Increased automation and documentation supporting repeatable operations.
• Effective cross-functional support to implementation, engineering, and support teams.

So what’s in it for me,

We pride ourselves for being a culture-based company buzzing with high-energy. Aside from the enthusiastic environment, you’ll enjoy:

• Competitive salary
• Health insurance
• Referral bonuses
• Vacation time
• Paid Maternity and Paternity leave
• Professional development and career growth opportunities
• Awesome team members

The pay range for this position in Colorado is $X95,000 - $110,000 (yr base pay); however, base pay offered may vary depending on job-related knowledge, skills, and experience. This information is provided per the Colorado Equal Pay Act. Base (CEPA) pay information is based on market location.

EON is proud to be an equal opportunity employer and prohibits discrimination and harassment of any kind. Our culture celebrates diversity and we are committed to creating an inclusive environment for all team members.