Senior AWS DevOps/Security Engineer – Architect
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Responsibilities:
- Design, build, and operate AWS environments across DEV, TEST, UAT, PROD, and DR
- Manage AWS accounts, service quotas, resource governance, tagging, cost controls, and environment readiness
- Implement private VPC/spoke architecture, subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity
- Coordinate integrations with corporate networks, firewalls, Netskope, on-premises systems, and shared AWS network services
- Build and support EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, Systems Manager, and related AWS services
- Design IAM roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access
- Implement KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and compliance controls
- Develop infrastructure automation using Terraform, AWS CloudFormation where appropriate, AWS CLI, Python, PowerShell, and Bash
- Build and maintain GitHub-based CI/CD pipelines for infrastructure and application deployments
- Establish automated validation, security scanning, policy checks, approval gates, release controls, and rollback procedures
- Implement CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alarms, dashboards, and centralized operational monitoring
- Support AWS MWAA/Airflow, RDS PostgreSQL, S3 landing zones, bastion services, and private application access
- Troubleshoot complex IAM, KMS, DNS, routing, firewall, endpoint, Linux, EC2, database, and managed-service issues
- Perform architecture reviews, cost optimization, capacity planning, disaster recovery planning, and production-readiness assessments
- Create architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation
- Participate in production support, incident response, root-cause analysis, and service improvement
Requirements:
- 8+ years of hands-on AWS cloud engineering, DevOps, platform engineering, or cloud security experience
- Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity
- Experience operating private, regulated, or enterprise AWS environments
- Strong infrastructure-as-code experience with Terraform
- Experience with GitHub Actions or comparable CI/CD platforms
- Proficiency with AWS CLI, Linux, Python, PowerShell, and Bash automation
- Understanding of identity federation, SAML/OIDC, secrets management, certificates, encryption, and least-privilege access
- Ability to troubleshoot across cloud infrastructure, networking, security, application, and on-premises boundaries
- Experience with monitoring, incident response, change management, and production operations
- Preferred AWS Solutions Architect, DevOps Engineer, Security, or Advanced Networking certification
- Experience with AWS MWAA, Airflow, Cognito, RDS PostgreSQL, Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS
- Experience supporting healthcare, government, or other regulated workloads
Benefits:
- Remote work option
- Diversity, equity, and inclusion commitment
- Sustainability-focused workplace
- Employee referral opportunity
Similar Jobs
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.
Associate, Cybersecurity – Data Privacy Litigation
Associate attorney defending privacy, cybersecurity, and complex commercial litigation for Constangy, Brooks, Smith & Prophete, LLP. Conducting research, drafting litigation documents, and supporting cases through trial preparation.
Associate Security Researcher
Associate Security Researcher supporting Cobalt’s penetration-testing research through systems administration, threat simulation, vulnerability triage, and technical report quality control.
Cyber Security Engineer
Cyber Security Engineer leading incident response, threat hunting, and forensics for NVIDIA’s corporate, cloud, and product environments. Building automated defenses against advanced threats.
Senior Security Research Architect, Confidential Computing
Senior Security Research Architect designing Trusted Execution Environment architectures for NVIDIA NICs and DPUs. Driving confidential-computing security across hardware, software, research, and product teams.
IT and Security Manager
IT and Security Manager securing Microsoft 365, Azure, vendors, and cybersecurity operations for Furnished Quarters’ furnished apartment business. Managing infrastructure, incident response, access, compliance, and technology partnerships.