Senior AWS DevSecOps / Platform Engineer

Our client is seeking a remote Senior AWS DevSecOps / Platform Engineer to help build, secure, and operate a mission-critical cloud platform supporting high-availability scientific and operational workloads. This is a remote position for a senior, hands-on engineer who is comfortable owning production AWS infrastructure from Infrastructure as Code through deployment, validation, monitoring, and ongoing operations. The environment is built around AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps, with a strong emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration. The ideal candidate has deep hands-on experience with Terraform and AWS, has operated Kubernetes/EKS in production, and understands how to build secure delivery pipelines that can withstand both operational scrutiny and formal security reviews. This is an opportunity to join a small, experienced engineering team where senior engineers have meaningful ownership and influence over platform architecture, security, automation, and engineering standards. What You Will Do Design, build, maintain, and improve production AWS infrastructure across multiple environments. Develop and maintain reusable Terraform modules and Infrastructure as Code used to provision and manage cloud infrastructure. Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code. Operate and maintain production Amazon EKS environments, including cluster networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing. Design and support Kubernetes workloads using Helm and modern container orchestration practices. Build and maintain GitOps-based deployment workflows using Argo CD, Flux, or comparable technologies. Develop and harden GitLab CI/CD pipelines supporting infrastructure and application delivery. Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation. Implement policy-as-code technologies such as OPA, Conftest, or comparable tools. Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation. Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity. Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity. Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies. Support the development and evolution of multi-account AWS environments and federal landing-zone architectures. Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices. Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities. Develop and maintain technical evidence and documentation supporting security controls and compliance reviews. Implement monitoring, logging, alerting, and observability using technologies such as Amazon CloudWatch, Grafana, or comparable platforms. Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues. Mentor other engineers and help establish strong engineering practices around code review, change management, automation, testing, and technical documentation. Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services. What You Will Bring Required Qualifications 7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments. Deep hands-on experience with Terraform, including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift. Strong hands-on AWS engineering experience supporting production workloads. Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services. Hands-on experience operating Kubernetes and Amazon EKS in production, not simply deploying applications to an existing cluster. Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management. Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform. Experience engineering CI/CD pipelines, with GitLab CI/CD strongly preferred. Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code. Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes. Experience supporting secure, highly available cloud infrastructure. Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF, including familiarity with requirements supporting an Authority to Operate. Strong troubleshooting, documentation, and communication skills. Ability to mentor engineers and provide senior technical leadership. U.S. Person with the ability to obtain and maintain a Public Trust. Preferred Qualifications Experience designing or operating multi-account AWS environments, AWS Organizations, Control Tower, or federal cloud landing zones. Experience with AWS GovCloud or FedRAMP environments. Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer. Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies. Experience with Docker and secure container build practices. Experience with serverless AWS technologies such as Lambda. Experience with real-time or event-driven data-processing architectures. AWS certification such as Solutions Architect, DevOps Engineer, or Developer. Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems. Familiarity with scientific data formats such as NetCDF or GRIB. Work Environment This position is remote. No routine on-site requirement is expected. Security / Eligibility Requirements U.S. Person. Ability to obtain and maintain a security clearance.