AWS DevSecOps Engineer

PhoenixTeam

. Build and operate AWS infrastructure using Terraform, AWS CDK, or CloudFormation .

Posted 10/30/2026full-timeRemote • Virginia • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in AWS infrastructure management, including Terraform and CI/CD pipeline ownership, while ensuring security compliance through automation and monitoring. Capable of collaborating effectively with cross-functional teams to enhance deployment processes and incident response.

Highest-signal resume keywords

AWS Infrastructure ManagementInfrastructure-As-Code Using TerraformCI/CD Pipeline OwnershipSAST/DAST IntegrationProduction Incident Recovery

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS CDKCloudFormationDockerPythonBashGoIAMECSEKSRDS

Soft Skills

Clear CommunicationCollaboration

Tools & Technologies

CloudWatchCloudTrailSecurity Audit ToolingMonitoring ToolsCost Visibility Tools

Industry Keywords

DevOpsDevSecOpsSite Reliability EngineeringInfrastructure AutomationNIST SP 800-53

Tech Stack

Tools & technologies

AWSDockerPythonTerraformGo

About the role

Key responsibilities & impact

Build and operate AWS infrastructure using Terraform, AWS CDK, or CloudFormation
Implement application infrastructure within shared Platform patterns and support multi-account controls
Own build, test, approval, and deployment pipelines as code and create reusable, documented workflows
Embed SAST, DAST, software-composition/dependency, container-image, and infrastructure-as-code scanning into release stages
Maintain blocking criteria and escalate risk acceptance and exceptions to authorized decision-makers
Apply least-privilege IAM, encryption, secrets handling, network isolation, and controlled production access
Design, supervise, and verify AI-assisted playbooks and workflows for hardening, testing, provisioning, containerization, and deployment
Independently review and test generated code, infrastructure definitions, and security evidence
Support blue/green or canary deployment and tested rollback
Use delivery and recovery metrics to improve reliable release delivery
Implement logs, metrics, tracing, health checks, alerts, and cost visibility
Participate in a rotating on-call schedule, respond to incidents, and contribute to post-incident reviews and runbooks
Use AWS security and audit tooling, remediate findings, and support relevant evidence needs
Collaborate with application engineers, Platform, QA/verification, and client security stakeholders on secure handoffs and deployment decisions

Requirements

What you’ll need

5+ years of hands-on DevOps, DevSecOps, site reliability, or platform engineering experience, including production responsibility, infrastructure automation, and deployment or incident recovery
Strong production AWS experience spanning VPC/networking, IAM, ECS or EKS, RDS, KMS, secrets management, CloudWatch, and CloudTrail
Experience deploying containerized workloads with Docker
Production infrastructure-as-code experience using Terraform, AWS CDK, or CloudFormation
Experience owning CI/CD pipelines as code, including automated testing, security gates, release promotion, troubleshooting, and rollback
Hands-on experience integrating SAST, DAST, SCA/dependency, container, and infrastructure-as-code security checks into delivery workflows
Ability to script automation in Python, Bash, or Go
Ability to independently validate generated scripts and infrastructure configurations
Practical understanding of least-privilege access, encryption, secure credential handling, and NIST SP 800-53 or a comparable security-control framework
Ability to supervise and verify AI-assisted engineering workflows with independent judgment
Clear written and verbal communication with technical and non-technical partners

Benefits

Comp & perks

Remote-first work arrangement with flexible arrangements
Rotating on-call schedule to support production systems and incident response
Up to 10% travel based on business or client needs
Full-time W2 employee status