Core Responsibilities
Responsibilities include collaborating with the platform and engineering teams to secure and improve production infrastructure, harden cloud and host configurations, and build repeatable operational practices across environments. Key responsibilities include:
- Design, implement, and maintain secure, scalable infrastructure in AWS
- Manage, secure, and improve Kubernetes-based environments, including production workloads
- Build and maintain infrastructure as code using Terraform
- Harden production systems across cloud, compute, container, identity, and network layers
- Develop and maintain secure baseline configurations for infrastructure and platform services
- Support vulnerability management, patching, remediation, and configuration compliance efforts across environments
- Configure, administer, and patch both Linux and Windows VMs
- Support identity and access management practices, including least privilege, role design, and privileged access controls
- Contribute to administration and integration of Active Directory domains where needed
- Partner with engineering teams to improve security within CI/CD pipelines, deployment workflows, and operational processes
- Support compliance initiatives, audits, evidence collection, and technical control validation
Required Qualifications
- Minimum of 5 years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, or Security Engineering
- Strong hands-on experience with AWS in production environments
- Proven experience with Kubernetes, preferably in production
- Strong experience with Terraform and infrastructure-as-code practices
- Experience hardening production environments and implementing secure configuration standards
- Experience supporting compliance frameworks, audit preparation, evidence gathering, and control validation
- Experience configuring and maintaining both Linux and Windows virtual machines
- Strong understanding of IAM, secrets management, network security, logging, monitoring, and operational controls
Preferred Qualifications
- Familiarity with compliance or security frameworks such as SOC 2, NIST, ISO 27001, CMMC
- Experience with EKS or other managed Kubernetes platforms
- Experience with automation tools such as Ansible, PowerShell
- Scripting experience in Python, Bash, or PowerShell
- Security+ Certification or Top Secret Security Clearance