Select Source Solutions

Senior AWS DevSecOps / Platform Engineer

Remote
Full Time
Experienced

Our client is seeking a remote Senior AWS DevSecOps / Platform Engineer to help build, secure, and operate a mission-critical cloud platform supporting high-availability scientific and operational workloads.

This is a remote position for a senior, hands-on engineer who is comfortable owning production AWS infrastructure from Infrastructure as Code through deployment, validation, monitoring, and ongoing operations.

The environment is built around AWS, Amazon EKS, Terraform, GitLab CI/CD, Kubernetes, and GitOps, with a strong emphasis on automation, security, reliability, and federal compliance. Infrastructure changes are managed through code and automated pipelines rather than manual configuration.

The ideal candidate has deep hands-on experience with Terraform and AWS, has operated Kubernetes/EKS in production, and understands how to build secure delivery pipelines that can withstand both operational scrutiny and formal security reviews.

This is an opportunity to join a small, experienced engineering team where senior engineers have meaningful ownership and influence over platform architecture, security, automation, and engineering standards.

What You Will Do

  • Design, build, maintain, and improve production AWS infrastructure across multiple environments.

  • Develop and maintain reusable Terraform modules and Infrastructure as Code used to provision and manage cloud infrastructure.

  • Manage Terraform remote state and safely reconcile differences between deployed infrastructure and Infrastructure as Code.

  • Operate and maintain production Amazon EKS environments, including cluster networking, autoscaling, add-ons, upgrades, workload identity, ingress, and load balancing.

  • Design and support Kubernetes workloads using Helm and modern container orchestration practices.

  • Build and maintain GitOps-based deployment workflows using Argo CD, Flux, or comparable technologies.

  • Develop and harden GitLab CI/CD pipelines supporting infrastructure and application delivery.

  • Integrate automated security controls into CI/CD pipelines, including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy enforcement, and artifact validation.

  • Implement policy-as-code technologies such as OPA, Conftest, or comparable tools.

  • Support container supply-chain security, including image scanning, Software Bills of Materials (SBOMs), image signing, and deployment validation.

  • Design and maintain secure AWS identity and access patterns using IAM and workload identity technologies such as IRSA or EKS Pod Identity.

  • Design and support AWS networking, including VPCs, routing, load balancing, security boundaries, and cross-account connectivity.

  • Work with AWS services including EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud technologies.

  • Support the development and evolution of multi-account AWS environments and federal landing-zone architectures.

  • Implement least-privilege access, network isolation, continuous monitoring, security controls, and other cloud-hardening practices.

  • Support federal cybersecurity requirements including NIST SP 800-53, FISMA, RMF, and Authority to Operate activities.

  • Develop and maintain technical evidence and documentation supporting security controls and compliance reviews.

  • Implement monitoring, logging, alerting, and observability using technologies such as Amazon CloudWatch, Grafana, or comparable platforms.

  • Troubleshoot complex AWS, Kubernetes, Terraform, networking, pipeline, security, and production infrastructure issues.

  • Mentor other engineers and help establish strong engineering practices around code review, change management, automation, testing, and technical documentation.

  • Collaborate with application developers, security teams, architects, and other technical stakeholders to deliver secure and reliable production services.

What You Will Bring

Required Qualifications

  • 7+ years of professional experience in DevOps, platform engineering, cloud infrastructure, systems engineering, or a related discipline, including senior-level ownership of production environments.

  • Deep hands-on experience with Terraform, including reusable modules, remote state, infrastructure lifecycle management, and remediation of configuration drift.

  • Strong hands-on AWS engineering experience supporting production workloads.

  • Experience with AWS networking, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related cloud services.

  • Hands-on experience operating Kubernetes and Amazon EKS in production, not simply deploying applications to an existing cluster.

  • Experience with Kubernetes networking, autoscaling, workload identity, Helm, ingress, load balancing, and cluster lifecycle management.

  • Hands-on experience implementing GitOps using Argo CD, Flux, or a comparable platform.

  • Experience engineering CI/CD pipelines, with GitLab CI/CD strongly preferred.

  • Experience implementing DevSecOps controls such as SAST, container scanning, Infrastructure as Code scanning, secrets detection, or policy-as-code.

  • Strong experience with Git-based development and infrastructure workflows, including merge requests, peer review, and controlled production changes.

  • Experience supporting secure, highly available cloud infrastructure.

  • Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF, including familiarity with requirements supporting an Authority to Operate.

  • Strong troubleshooting, documentation, and communication skills.

  • Ability to mentor engineers and provide senior technical leadership.

  • U.S. Person with the ability to obtain and maintain a Public Trust.

Preferred Qualifications

  • Experience designing or operating multi-account AWS environments, AWS Organizations, Control Tower, or federal cloud landing zones.

  • Experience with AWS GovCloud or FedRAMP environments.

  • Experience implementing container supply-chain security, including SBOMs, image signing, admission controls, or AWS Signer.

  • Experience with CloudWatch, Grafana, Prometheus, or comparable observability technologies.

  • Experience with Docker and secure container build practices.

  • Experience with serverless AWS technologies such as Lambda.

  • Experience with real-time or event-driven data-processing architectures.

  • AWS certification such as Solutions Architect, DevOps Engineer, or Developer.

  • Experience supporting scientific, environmental, geospatial, weather, or other data-intensive mission systems.

  • Familiarity with scientific data formats such as NetCDF or GRIB.

Work Environment

  • This position is remote.

  • No routine on-site requirement is expected.

Security / Eligibility Requirements

  • U.S. Person.

  • Ability to obtain and maintain a security clearance. 

Share

Apply for this position

Required*
We've received your resume. Click here to update it.
Attach resume or Paste resume
Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.
Invitation for Job Applicants to Self-Identify as a U.S. Veteran
  • A “disabled veteran” is one of the following:
    • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    • a person who was discharged or released from active duty because of a service-connected disability.
  • A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  • An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  • An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Veteran status


Voluntary Self-Identification of Disability
Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 07/31/2029
Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Please check one of the boxes below:

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

You must enter your name and date
Human Check*