AWS DevSecOps Engineer

Role & Responsibilities:

• Lead end-to-end migration of large-scale repositories from AWS CodeCommit and GitLab to GitHub Enterprise with full history and access control mapping.
  
• Design, implement, and enforce Git standards including branching, commits, tagging, and release workflows.
  
• Redesign AWS CI/CD pipelines (CodePipeline & CodeBuild) to integrate with GitHub Actions and self-hosted runners.
  
• Automate DevSecOps processes using Python (boto3, REST APIs) and JavaScript.
  
• Develop IaC solutions with Terraform and AWS CloudFormation following modular and secure design principles.
  
• Define and implement multi-stage approval workflows, policy enforcement, and security scans (SonarQube, Sonatype).
  
• Manage infrastructure and pipelines for AWS-native services like Lambda, S3, ECS, RDS, and CloudWatch.
  
• Build automation scripts (Shell/Python) for system integration and CI/CD orchestration.
  
• Implement monitoring and observability for pipelines and deployments using CloudWatch / New Relic.
  
• Ensure adherence to DevSecOps security frameworks and compliance policies.
  

Preferred Candidate Profile:

• Bachelors or Master’s in Computer Science, Software Engineering, or related field.
  
• 3–7 years of experience in AWS and GitHub Enterprise environments.
  
• Expertise in Python, JavaScript, Terraform, and CloudFormation.
  
• Strong understanding of AWS services – IAM, STS, Lambda, ECS, S3, CodeBuild, Secrets Manager, RDS, etc.
  
• Proven experience in GitHub Actions, self-hosted runners, and enterprise GitHub administration.
  
• Familiar with CI/CD security, OIDC, SCIM, and least-privilege IAM policies.
  
• Working knowledge of databases (MySQL, PostgreSQL).
  
• Excellent communication, documentation, and client coordination skills.
  
• AWS Professional or Terraform Certification preferred.