AWS DevSecOps Engineer

The AWS Dev Sec Ops  Engineer builds, secures, and operates the AWS environments and automated delivery pipelines that Phoenix Team uses for internal and client applications. This is a hands‑on production engineering role spanning infrastructure as code, container deployment, CI/CD, security controls integrated into releases, reliability, and incident recovery. The engineer uses shared Platform patterns to make deployment repeatable rather than relying on one‑off application setups.

Agentic orchestration is a primary delivery approach: the engineer designs, supervises, and verifies AI-assisted workflows for testing, hardening, containerization, infrastructure provisioning, and deployment. Success depends on independent AWS, Dev Sec Ops , and security judgment—especially when generated scripts or configurations are wrong. The goal is to improve speed and reliability from prototype through production without bypassing security reviews or release controls.

• Build and operate AWS infrastructure using Terraform, AWS CDK, or Cloud Formation, including VPC networking, IAM, ECS/Fargate or EKS, RDS, load balancing, KMS, Secrets Manager, S3, and Cloud Watch.
• Implement application infrastructure within shared Platform patterns; support multi‑account controls using AWS Organizations, Control Tower, service control policies, or comparable guardrails.
• Own build, test, approval, and deployment pipelines as code using Git Hub Actions, Forgejo Actions, AWS Code Pipeline, or comparable tools; create reusable, documented workflows.
• Embed SAST, DAST, software-composition/dependency, container‑image, and infrastructure‑as‑code scanning in release stages; maintain blocking criteria and elevate risk acceptance and exceptions to authorized decision‑makers.
• Apply least‑privilege IAM, encryption, secrets handling, network isolation, and controlled production access; constrain what automation and AI agents can access or change.
• Design and verify agent‑executable playbooks for hardening, testing, provisioning, and deployment; independently review and test generated code, infrastructure definitions, and security evidence.
• Support blue/green or canary deployment and tested rollback; use lead time, deployment frequency, failure rate, and recovery metrics to improve reliable release delivery.
• Implement logs, metrics, tracing, health checks, alerts, and cost visibility; participate in a rotating on‑call schedule, respond to incidents, and contribute to post‑incident reviews and runbooks.
• Use AWS security and audit tooling such as Security Hub, Guard Duty, Config, Cloud Trail, Inspector, and IAM Access Analyzer as applicable; remediate findings and support relevant evidence needs.
• Work with application engineers, Platform, QA/verification, and client security stakeholders to support secure handoffs and explain deployment decisions, controls, and human verification.

• 5+ years of hands‑on Dev Ops, Dev Sec Ops , site reliability, or platform engineering experience, including production responsibility, infrastructure automation, and deployment or incident recovery.
• Strong production AWS experience spanning VPC/networking, IAM, ECS or EKS, RDS, KMS, secrets management, Cloud Watch, and Cloud Trail.
• Experience deploying containerized workloads with Docker and building production infrastructure as code using Terraform, AWS CDK, or Cloud Formation.
• Experience owning CI/CD pipelines as code, including automated testing, security gates, release promotion, troubleshooting, and rollback.
• Hands‑on experience integrating SAST, DAST, SCA/dependency, container, and infrastructure‑as‑code security checks into delivery workflows.
• Ability to script automation in Python, Bash, or Go and independently validate…