Senior AWS DevSecOps Engineer

Position Overview
We are seeking a hands-on Senior AWS DevSecOps Engineer to strengthen the security of an existing AWS cloud environment. This individual will review identified security findings, troubleshoot vulnerabilities and configuration issues, and implement effective remediations across AWS services and Kubernetes environments.
The ideal candidate has deep experience with AWS, Amazon EKS, Kubernetes, IAM, EC2, and cloud security. This person must be able to quickly understand an established environment, take ownership of security findings, and resolve issues independently with minimal ramp-up or oversight.
Key Responsibilities
Review, prioritize, and remediate identified security findings across the AWS environment.
Investigate cloud vulnerabilities, configuration gaps, suspicious activity, and overly permissive access.
Secure and support AWS services, including IAM, EC2, EKS, VPC, Secrets Manager, GuardDuty, WAF, CloudFront, CloudWatch, S3, and load balancers.
Harden Amazon EKS and Kubernetes environments across the control plane, worker nodes, containers, pods, and running workloads.
Identify and remediate Kubernetes security risks involving:
RBAC and cluster access
Service accounts and IAM roles
Pod and container security
Network policies
Secrets management
Container images
Runtime security
Design and maintain IAM roles and policies using least-privilege principles.
Investigate and respond to security alerts involving AWS resources, EC2 instances, containers, and Kubernetes workloads.
Improve EC2 hardening and patch-management practices while minimizing disruption to production environments.
Detect, contain, and remediate compromised workloads within AWS and EKS.
Prevent hardcoded credentials and secrets from entering source-code repositories, container images, and deployment workflows.
Use AWS Secrets Manager, HashiCorp Vault, or similar solutions to securely manage credentials and sensitive configuration data.
Implement or improve security scanning for source code, applications, containers, and cloud infrastructure.
Perform root-cause analysis and implement permanent fixes that reduce the likelihood of recurring security issues.
Partner with engineering and security teams to validate remediations and document technical decisions.
Automate repeatable security controls and remediation activities when appropriate.
Independently own security issues from initial investigation through final resolution.
Required Qualifications
Extensive hands-on experience supporting and securing production environments in AWS.
Strong experience with Amazon EKS and Kubernetes architecture, administration, security, and troubleshooting.
Demonstrated experience remediating AWS and Kubernetes security findings.
Deep understanding of AWS Identity and Access Management, including:
IAM roles and policies
Least-privilege access
Cross-account permissions
Workload identities
Service accounts
Secrets access
Experience securing and troubleshooting AWS compute and networking services, including EC2, VPC, security groups, load balancers, and S3.
Experience with AWS security and monitoring services such as GuardDuty, Secrets Manager, CloudWatch, WAF, and related tools.
Strong understanding of Kubernetes security across clusters, nodes, containers, pods, networking, and application workloads.
Experience with container security, including image scanning, vulnerability remediation, runtime protection, and incident response.
Experience securing credentials and sensitive information using AWS Secrets Manager, HashiCorp Vault, or comparable technologies.
Strong understanding of vulnerability management, security hardening, patching, and remediation.
Ability to investigate security alerts, identify root causes, and implement permanent corrective actions.
Strong troubleshooting and problem-solving skills.
Ability to work independently and deliver solutions with minimal technical direction.
Preferred Qualifications
Experience with Terraform, Python, Ansible, or Shell scripting for cloud automation and remediation.
Familiarity with Docker, Helm, Argo CD, Jenkins, GitHub, or Bitbucket.
Experience with security tools such as Prisma Cloud, Terrascan, SonarQube, or comparable platforms.
Familiarity with SAST, DAST, container scanning, and Infrastructure as Code scanning.
Experience supporting multi-account or multi-region AWS environments.
Experience with Datadog, Prometheus, or other cloud-monitoring platforms.
Knowledge of certificate management, private certificate authorities, and mutual TLS.
AWS or Kubernetes certifications.
Experience supporting critical applications in enterprise production environments.
Technology Environment
AWS
Amazon EKS
Kubernetes
IAM
EC2
VPC
S3
AWS Secrets Manager
GuardDuty
CloudWatch
WAF
CloudFront
Docker
Helm
Terraform
Python
Ansible
HashiCorp Vault
Prisma Cloud
Terrascan
SonarQube
Datadog
Prometheus
Ideal Candidate Profile
The successful candidate will be able to:
Quickly understand an existing AWS and Kubernetes environment.
Take ownership of assigned security findings without extensive guidance.
Identify the root cause of cloud and container security issues.
Implement practical, secure, and sustainable remediations.
Balance security requirements with production stability.
Work efficiently in a fast-paced environment.
Clearly explain the security risk, the remediation, and how recurrence will be prevented.