AWS DevSecOps Engineer

Designs, architects, implements, and operates secure AWS cloud infrastructure and deployment automation. Builds reusable Infrastructure as Code using Terraform and AWS CloudFormation; automates Snowflake account and object deployments through Terraform; develops CI/CD pipelines with integrated security, testing, approvals, and environment promotion; partners with data, platform, security, and engineering teams to deliver reliable production platforms.

Technical Skills and Capabilities

AWS infrastructure and services (IAM, VPC, S3, EC2, EKS, Lambda, KMS, CloudWatch), Infrastructure as Code (Terraform and AWS CloudFormation), Snowflake Provider for Terraform, CI/CD platforms (GitHub Actions, GitLab CI, or equivalent), Python and shell scripting, Docker and Kubernetes, Git, secrets management, policy as code, and automated testing.

DevSecOps and Operating Standards

DevSecOps architecture and design, secure landing-zone patterns, IAM and least-privilege controls, infrastructure testing and code review, vulnerability and compliance scanning, secrets and key management, environment promotion, release governance, observability, incident response, disaster recovery, cost optimization, and operational documentation.

Core Responsibilities

Architects and implements secure, reusable AWS and Snowflake deployment automation. Administers Terraform and CloudFormation standards, builds CI/CD frameworks, embeds security controls into delivery pipelines, and enables consistent promotion across development, test, and production environments.

Key Deliverables

• AWS reference architectures
• Reusable Terraform modules
• CloudFormation templates
• Snowflake Terraform deployment modules
• CI/CD pipeline architecture and implementations
• Security and compliance automation
• Infrastructure test suites
• Environment promotion workflows
• Monitoring and alerting standards
• Deployment and support runbooks