Skip to main content
T

Senior AWS Cloud, DevOps & Security Engineer

Tech M USA
1 day ago
Contract
On-site
Florham Park, New Jersey, United States

Job Title: Senior AWS Cloud, DevOps & Security Engineer
FLORHAM PARK, NJ

Experience : 8 - 10 Years

Role Summary 

The engineer will design, build, secure, automate, operate, and support AWS environments for the HMS Modernization and Teradata Migration programs. This is a broad hands-on AWS platform role covering cloud infrastructure, networking, security, automation, CI/CD, observability, managed services, and production operations. Terraform is a primary automation tool, but the position is not limited to Terraform. 

 Key Responsibilities 

  • Design, build, and operate AWS environments across DEV, TEST, UAT, PROD, and DR. 

  • Manage AWS accounts, service quotas, resource governance, tagging, cost controls, and environment readiness. 

  • Implement private VPC/spoke architecture, subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity. 

  • Coordinate integrations with corporate networks, firewalls, Netskope, on-premises systems, and shared AWS network services. 

  • Build and support EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, Systems Manager, and related AWS services. 

  • Design IAM roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access. 

  • Implement KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and compliance controls. 

  • Develop infrastructure automation using Terraform, AWS CloudFormation where appropriate, AWS CLI, Python, PowerShell, and Bash. 

  • Build and maintain GitHub-based CI/CD pipelines for infrastructure and application deployments. 

  • Establish automated validation, security scanning, policy checks, approval gates, release controls, and rollback procedures. 

  • Implement CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alarms, dashboards, and centralized operational monitoring. 

  • Support AWS MWAA/Airflow, RDS PostgreSQL, S3 landing zones, bastion services, and private application access. 

  • Troubleshoot complex IAM, KMS, DNS, routing, firewall, endpoint, Linux, EC2, database, and managed-service issues. 

  • Perform architecture reviews, cost optimization, capacity planning, disaster recovery planning, and production-readiness assessments. 

  • Create architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation. 

  • Participate in production support, incident response, root-cause analysis, and service improvement. 

Required Experience 

  • 5+ years of hands-on AWS cloud engineering, DevOps, platform engineering, or cloud security experience. 

  • Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity. 

  • Experience operating private, regulated, or enterprise AWS environments. 

  • Strong infrastructure-as-code experience with Terraform; CloudFormation or AWS CDK experience is beneficial. 

  • Experience with GitHub Actions or comparable CI/CD platforms. 

  • Proficiency with AWS CLI, Linux, Python, PowerShell, and Bash automation. 

  • Understanding of identity federation, SAML/OIDC, secrets management, certificates, encryption, and least-privilege access. 

  • Ability to troubleshoot across cloud infrastructure, networking, security, application, and on-premises boundaries. 

  • Experience with monitoring, incident response, change management, and production operations. 

Preferred 

  • AWS Solutions Architect, DevOps Engineer, Security, or Advanced Networking certification. 

  • Experience with AWS MWAA, Airflow, Cognito, RDS PostgreSQL, Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS. 

  • Experience supporting healthcare, government, or other regulated workloads.