About the Role
You will architect and maintain scalable AWS infrastructure using Terraform and CloudFormation, treating Infrastructure as Code as the standard for all deployments. You will implement and automate security controls within the CI/CD pipeline and ensure infrastructure meets BSP, ISO 27001, and SoC2 compliance through automated policy enforcement. You will manage production-grade Kubernetes (EKS) clusters and Helm charts, focusing on high availability, auto-scaling, and resource optimization. You will deploy and manage security tools including WAF, SIEM, XDR, and AWS CloudTrail, proactively monitoring for vulnerabilities and infrastructure threats. You will provide robust infrastructure support for mission-critical applications, including data-intensive services and internal risk-monitoring tools. You will also explore and integrate LLM-based tools such as OpenAI and Bedrock to automate incident response, optimize scripts, and improve internal engineering productivity.
Requirements
- 5+ years of experience in maintaining high-availability services and supporting distributed cloud infrastructure
- Expert-level knowledge of Kubernetes (EKS) and Helm
- Deep proficiency in AWS services (EC2, RDS, S3, IAM)
- Strong production experience with Terraform
- Proven track record in infrastructure hardening and supporting external audits
- Deep understanding of the shared responsibility model in cloud security
- Proficiency in Python or Java
- Hands-on experience managing RDS, Redis, and Kafka
Responsibilities
- Architect and maintain scalable AWS infrastructure using Terraform and CloudFormation
- Implement and automate security controls within the CI/CD pipeline
- Ensure infrastructure meets BSP, ISO 27001, and SoC2 compliance through automated policy enforcement
- Manage production-grade Kubernetes (EKS) clusters and Helm charts
- Focus on high availability, auto-scaling, and resource optimization
- Deploy and manage security tools including WAF, SIEM, XDR, and AWS CloudTrail
- Proactively monitor for vulnerabilities and infrastructure threats
- Provide infrastructure support for mission-critical applications, data-intensive services, and internal risk-monitoring tools
- Explore and integrate LLM-based tools to automate incident response, optimize scripts, and improve engineering productivity