Lead DevSecOps Engineer

Job Description

<p>Requirements:</p><ul><li>7+ years of hands-on DevOps/Infrastructure engineering experience with AWS</li><li>Proven track record of redesigning and scaling production infrastructure for high-growth companies</li><li>Deep expertise in AWS services including RDS, EC2, ELB/ALB, Route53, VPC, IAM, and CloudFormation/Terraform</li><li>Strong security background with experience in infrastructure hardening and compliance</li><li>Experience migrating from traditional deployments to modern container orchestration (Kubernetes/ECS)</li><li>Proficiency in infrastructure-as-code tools (Terraform preferred)</li><li>Expert-level scripting skills in Python, Go, or Bash</li><li>Experience with GitLab CI/CD pipelines and GitLab-based workflows</li><li>Kubernetes expertise for container orchestration at scale</li><li>Experience with monitoring/observability tools (Prometheus, Grafana, DataDog, ELK stack)</li><li>Advanced GitLab experience including GitOps practices, GitLab Runner optimization, and GitLab security scanning</li><li>Knowledge of serverless architectures and event-driven systems</li><li>Experience with compliance frameworks (SOC2, ISO 27001, etc.)</li><li>Previous experience supporting AI/ML workloads and data pipelines</li></ul> <p>Responsibilities:</p><ul><li>Critically evaluate our existing AWS infrastructure setup including RDS configurations, EC2 instances, Nginx load balancing, Docker Compose deployments, Target Groups, and Route53 DNS management</li><li>Identify security vulnerabilities and scalability bottlenecks in the current architecture</li><li>Design and implement infrastructure improvements with a focus on high availability, disaster recovery, and auto-scaling capabilities</li><li>Modernize deployment strategies moving from Docker Compose to more scalable orchestration solutions where appropriate</li><li>Conduct security audits of existing infrastructure and implement security hardening measures</li><li>Redesign network architecture with proper VPC segmentation, security groups, and IAM policies</li><li>Implement secrets management and encryption at rest/in transit across all services</li><li>Establish compliance frameworks suitable for enterprise clients in manufacturing and aerospace sectors</li><li>Architect auto-scaling solutions to handle variable workloads and traffic spikes</li><li>Optimize database performance and implement proper backup/recovery strategies for RDS</li><li>Design load balancing strategies that can handle global traffic distribution</li><li>Implement caching layers and CDN strategies for improved performance</li><li>Take full ownership of infrastructure decisions and their implementation</li><li>Drive initiatives from conception to completion with minimal supervision</li><li>Establish infrastructure standards and best practices across the engineering organization</li><li>Lead incident response and post-mortem analysis for infrastructure-related issues</li></ul>