Senior AWS DevOps Engineer

Payactiv; Milpitas (CA); On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401K with company match

Tuition assistance

Unlimited PTO

Gym reimbursement

Paid family leave

Office lunches

Job summary

Payactiv, Inc. is seeking a Senior AWS DevOps & Cloud Security Engineer to own security, production infrastructure, and DevOps automation across our AWS environment in Silicon Valley.

You will secure cloud infrastructure, manage production-scale systems, and lead CI/CD and IaC initiatives. The ideal candidate will be a security-first engineer with strong AWS, Docker/EKS, AD/IAM integration, Windows workloads, and mature DevOps in regulated, high-availability settings.

Qualifications

• 8-10 years in DevOps, Infra, or Cloud Eng roles.
• Proven cloud security experience including IAM governance and secrets management.
• In-depth AD experience including IAM-AD integration and federated auth.
• Production Docker experience (4+ years) and EKS/Kubernetes.
• Strong scripting: PowerShell preferred, Bash or Python also ok.
• CI/CD tooling: Azure DevOps, GitHub Actions, or Jenkins.
• IaC tools: Terraform, CloudFormation, or Pulumi.
• Windows Server IIS, .NET/C# apps, SQL Server.
• Monitoring/APM: Datadog, Dynatrace, AppDynamics, Site24x7.
• Networking basics: DNS, LB, SSL/TLS, VPC, routing, firewalls.

Responsibilities

• Own the security posture of AWS accounts, environments, and production workloads.
• Design, implement, and maintain highly available, scalable, secure AWS infra.
• Manage AD integration with AWS IAM for EC2, EKS, and app access.
• Lead end-to-end DevOps initiatives: CI/CD, IaC, version control, artifacts, pipelines.
• Administer and harden Windows Server IIS workloads on AWS.
• Implement container orchestration via Docker and EKS.
• Define and enforce cloud governance policies and CIS/NIST/HIPAA adherence.
• Set up observability: alerting, logging, metrics, dashboards (Datadog, Dynatrace, AppDynamics).
• Create automation scripts and tools to improve ops efficiency.
• Handle on-call and incident response with RCA and preventive measures.
• Monitor and optimize cloud costs, performance, availability.
• Mentor juniors to follow DevOps/security best practices.

Skills

Security-first mindset

AWS cloud

Container platforms

AD/IAM integration

Windows workloads

DevOps automation

Scripting (PowerShell)

CI/CD pipelines

IaC (Terraform/CFN/Pulumi)

Monitoring/APM

Networking basics

Tools

Docker

Amazon EKS/Kubernetes

Azure DevOps/GitHub Actions/Jenkins

Terraform/CloudFormation/Pulumi

Datadog/Dynatrace/AppDynamics/Site24x7

AD/IAM integration

Windows Server IIS

Job description

Salary Range: 175K to 200K (based on experience)

We are Payactiv, a FinTech company in the heart of Silicon Valley, devoted to giving workers access to their earned wages when they need them. Payactiv is the pioneer and industry leader in Earned Wage Access. We are the only Certified B Corporation and Public Benefit Corporation in our industry. Our app provides millions with financial services that help them avoid debt, manage their finances, and regain flexibility to pay for things on their own schedule.

We are seeking a Senior AWS DevOps & Cloud Security Engineer with 8-10 years of hands-on experience to own and drive the security, production infrastructure and DevOps automation across our AWS environment.

This is a critical role where you will be directly responsible for:

• Designing and securing cloud infrastructure.
• Managing production-grade systems at scale.
• Leading DevOps practices across CI/CD, monitoring, and infrastructure automation.

The ideal candidate is a security-first engineer with expertise in AWS, modern containerized platforms (EKS/Docker), AD/IAM integration, Windows workloads, and strong DevOps experience in a regulated, high-availability environment.

What you will do:

• Own the security posture of AWS accounts, environments, and production workloads.
• Design, implement, and maintain highly available, scalable, and secure AWS infrastructure.
• Manage Active Directory (AD) integration with AWS IAM, including EC2, EKS, and application-level access control.
• Lead end-to-end DevOps initiatives: CI/CD, Infrastructure as Code (IaC), version control, artifact management, and deployment pipelines.
• Administer and harden Windows Server/IIS workloads hosted on AWS.
• Implement container orchestration and management via Docker and EKS.
• Define and enforce cloud governance policies and compliance frameworks (CIS, NIST, HIPAA, etc.).
• Set up and manage observability systems: alerting, logging, metrics, and dashboards (e.g., Datadog, Dynatrace, AppDynamics).
• Create and maintain automation scrix`pts and tools to improve operational efficiency.
• Handle on-call and incident response, including RCA documentation and preventive measures.
• Monitor and optimize cloud costs, performance, and availability.
• Mentor junior engineers and ensure DevOps/security best practices are followed.

What you need:

• 8-10 years of experience in DevOps, Infrastructure, or Cloud Engineering roles.
• Proven experience in cloud security, including IAM governance, least privilege policies, and secrets management.
• In-depth experience with Active Directory, including IAM-AD integration and federated authentication.
• Production experience with Docker (4+ years) and Amazon EKS/Kubernetes.
• Strong scripting skills: PowerShell (primary), Bash, or Python.
• CI/CD pipeline experience using Azure DevOps (VSTS/TFS), GitHub Actions, or Jenkins.
• Experience with Infrastructure as Code (IaC) tools like Terraform, CloudFormation, or Pulumi.
• Hands-on experience with Windows Server IIS, .NET/C# applications, and SQL Server.
• Proficiency in monitoring and APM tools such as Datadog, Dynatrace, AppDynamics, Site24x7.
• Solid understanding of networking: DNS, Load Balancing, SSL/TLS, VPC, routing, firewalls.

Preferred Qualifications

• AWS Certifications: DevOps Engineer-Professional, Security- Specialty, or Solutions Architect-Professional.
• Experience with secrets management tools: AWS Secrets Manager, SSM Parameter Store, or HashiCorp Vault.
• Familiarity with Zero Trust, SSO, SAML, and OIDC-based authentication models.
• Knowledge of cost optimization strategies using AWS Cost Explorer, Trusted Advisor, and Savings Plans.
• Experience working in regulated industries (e.g., healthcare, finance, or government).

What we offer…

• Company sponsored Health, Dental, and Vision insurance
• Health, Dental and Vision Reimbursement account
• 401K, traditional, and Roth with a company match
• Tuition Assistance or Tuition Reimbursement
• Unlimited Paid Time off
• Monthly Gym ReimbursementPaid time off to volunteer
• Paid Family Leave
• Complimentary office lunches
• Opportunity to work with a great team committed to making a difference.