Senior AWS DevOps & Security Engineer

Digitailor; Dallas (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

Tieto is seeking an experienced AWS engineer to design, build, secure, automate, operate, and support AWS environments for the HMS Modernization and Teradata Migration programs. This role covers cloud infrastructure, networking, security, automation, CI/CD, observability, and production operations.

The ideal candidate will have 8+ years of hands-on AWS experience, IaC with Terraform, and strong CI/CD skills, including GitHub Actions.

Qualifications

• 8+ years of hands-on AWS cloud engineering, DevOps, platform engineering, or cloud security experience.
• Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity.
• Infrastructure-as-code experience with Terraform; CloudFormation or AWS CDK is beneficial.
• Experience with GitHub Actions or comparable CI/CD platforms.
• Proficiency with AWS CLI, Linux, Python, PowerShell, and Bash automation.

Responsibilities

• Design, build, and operate AWS environments across DEV, TEST, UAT, PROD, and DR.
• Manage AWS accounts, service quotas, resource governance, tagging, cost controls, and environment readiness.
• Implement private VPC/spoke architecture, subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity.
• Coordinate integrations with corporate networks, firewalls, Netskope, on-premises systems, and shared AWS network services.
• Build and support EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, Systems Manager, and related AWS services.
• Design IAM roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access.
• Implement KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and compliance controls.
• Develop infrastructure automation using Terraform, AWS CloudFormation where appropriate, AWS CLI, Python, PowerShell, and Bash.
• Build and maintain GitHub-based CI/CD pipelines for infrastructure and application deployments.
• Establish automated validation, security scanning, policy checks, approval gates, release controls, and rollback procedures.
• Implement CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alarms, dashboards, and centralized operational monitoring.
• Support AWS MWAA/Airflow, RDS PostgreSQL, S3 landing zones, bastion services, and private application access.
• Troubleshoot IAM, KMS, DNS, routing, firewall, endpoint, Linux, EC2, database, and managed-service issues.
• Perform architecture reviews, cost optimization, capacity planning, disaster recovery planning, and production-readiness assessments.
• Create architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation.
• Participate in production support, incident response, root-cause analysis, and service improvement.

Skills

AWS cloud engineering

Terraform

CI/CD pipelines

Security

Linux

Networking

Tools

GitHub Actions

AWS CLI

Job description

Tieto is seeking an experienced AWS engineer to design, build, secure, automate, operate, and support AWS environments for the HMS Modernization and Teradata Migration programs. This role covers cloud infrastructure, networking, security, automation, CI/CD, observability, and production operations.

The ideal candidate will have 8+ years of hands-on AWS experience, IaC with Terraform, and strong CI/CD skills, including GitHub Actions.