Senior DevOps Engineer: AWS, IaC, Security, Remote

Decca Consulting LLC; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Decca Consulting LLC seeks an experienced DevOps/SRE to own end-to-end AWS infrastructure. You will manage TypeScript CDK stacks across many accounts, and automate security, access management, and compliance in a SOC 2/HIPAA environment.

You’ll build internal tooling, improve CI/CD with GitHub Actions and CodePipeline, and operate ECS/EKS workloads. A hands-on role with strong coding in TypeScript or Python is required.

Qualifications

• 4+ years in DevOps, SRE, or cloud infra.
• Deep hands-on AWS with IAM, VPC, and cross-account access.
• Infrastructure-as-Code experience; TypeScript CDK preferred.
• Production coding in TypeScript and/or Python.
• CI/CD ownership with GitHub Actions/CodePipeline.
• Containers on AWS: ECS or EKS, ECR.
• Linux administration and SSM familiarity.
• Identity systems: SSO/SAML/OIDC with least privilege.
• Clear written communication and runbooks.

Responsibilities

• Build and maintain IaC estate using TypeScript CDK across multiple accounts.
• Own production services: ECS Fargate, Aurora, Lambda, API Gateway, S3.
• Improve observability: CloudWatch, Synthetics, VPC logs, CloudTrail.
• Automate security and compliance: SCPs, IAM Center, secret scanning.
• Run access management as a product: Okta SSO/SAML, SCIM, VPN access.
• Build internal tooling: chat bots and LLM-backed tooling.
• Improve CI/CD: GitHub Actions, CodePipeline, deployment gates.
• Participate in on-call rotations for production infra.

Skills

AWS

CDK

TypeScript

Python

GitHub Actions

CodePipeline

ECS/EKS

Linux

IAM

SAML/OIDC

Tools

Terraform

CloudFormation

AWS CDK

Job description

Decca Consulting LLC seeks an experienced DevOps/SRE to own end-to-end AWS infrastructure. You will manage TypeScript CDK stacks across many accounts, and automate security, access management, and compliance in a SOC 2/HIPAA environment.

You’ll build internal tooling, improve CI/CD with GitHub Actions and CodePipeline, and operate ECS/EKS workloads. A hands-on role with strong coding in TypeScript or Python is required.