DevOps Engineer
On-siteNorwalk, Connecticut, United States or Norwalk, California, United States
Job Summary
Build and maintain the IaC estate using TypeScript AWS CDK repos to deploy fleets into a dozen+ accounts via CodePipeline. Own production services including ECS Fargate, Aurora, Lambda, and API Gateway, handling deployment, monitoring, and debugging. Make observability effective by configuring CloudWatch alarms, Synthetics canaries, and log retention policies that trigger real page-outs. Automate security and compliance by enforcing Service Control Policies, managing IAM Identity Center, and collecting evidence for SOC 2. Run access management as a product by provisioning Okta SSO, SCIM, and OpenVPN fleets via chat commands or Jira tickets. Build internal tooling like Google Chat bots and LLM-backed dashboards on Amazon Bedrock to automate PR reviews and incident paging. Improve CI/CD with GitHub Actions workflows and deployment safety gates. Participate in on-call rotation for production infrastructure.
Required Qualifications
- 4+ years in DevOps, SRE, platform, or cloud infrastructure engineering
- Deep, hands-on AWS: You can reason about IAM trust policies, VPC networking, and cross-account access without a diagram
- Real Infrastructure-as-Code experience: AWS CDK strongly preferred; Terraform/CloudFormation background transfers fine, but you'll be writing TypeScript CDK here
- Production Coding: Comfortable writing production code, not just config (TypeScript and/or Python)
- CI/CD Pipeline Ownership: GitHub Actions, CodePipeline, or equivalent
- Containers on AWS: ECS or EKS, image builds, ECR, task/service configuration
- Linux Administration: Shell fluency; comfortable on a box with systemctl, journalctl, and no GUI
- Identity Systems: SSO/SAML/OIDC, IAM roles vs. users, least privilege in practice
- Clear Written Communication: Our runbooks, PR descriptions, and incident notes are how the team scales
Desired Qualifications
- Healthcare, fintech, or another regulated environment; HIPAA or SOC 2 audit experience
- AWS Organizations at scale: SCPs, Control Tower, Identity Center, multi-account CDK bootstrapping
- Data platform exposure: Glue, Athena, QuickSight, Lake Formation, DMS
- Amazon Bedrock or other LLM API work—we build with Claude and are actively expanding internal AI tooling
- Windows Server administration via SSM (a slice of our analytics estate is Windows)
- OpenVPN Access Server, Cloudflare, Route 53 at an operational level
- Next.js / React—several internal dashboards are full-stack and you'd own them soup to nuts
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.