AWS DevOps/Security Engineer Senior/Architect

Senior AWS DevOps/Security Engineer (Senior/Architect) role for building, securing, automating, operating, and supporting AWS platforms for HMS Modernization and Teradata Migration programs.

• Design, build, and operate AWS environments across DEV, TEST, UAT, PROD, and DR
• Manage AWS accounts and governance including service quotas, resource governance, tagging, cost controls, and environment readiness
• Implement private networking with private VPC/spoke architecture, subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity
• Coordinate enterprise integrations with corporate networks, firewalls, Netskope, on-premises systems, and shared AWS network services
• Build and support core AWS services including EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, Systems Manager, and related services
• Own IAM design for roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access
• Strengthen security and compliance with KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and compliance controls
• Automate infrastructure using Terraform (primary), plus CloudFormation where appropriate, AWS CLI, Python, PowerShell, and Bash
• Deliver GitHub-based CI/CD pipelines for infrastructure and application deployments
• Implement delivery safeguards such as automated validation, security scanning, policy checks, approval gates, release controls, and rollback procedures
• Operate with observability via CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alarms, dashboards, and centralized monitoring
• Support platform components including AWS MWAA/Airflow, RDS PostgreSQL, S3 landing zones, bastion services, and private application access
• Troubleshoot complex issues across IAM, KMS, DNS, routing, firewall rules, endpoints, Linux, EC2, databases, and managed services
• Perform architecture and readiness activities including architecture reviews, cost optimization, capacity planning, disaster recovery planning, and production-readiness assessments
• Produce operational artifacts such as architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation
• Participate in production operations including support coverage, incident response, root-cause analysis, and service improvement

Requirements

• 8+ years of hands-on AWS cloud engineering, DevOps, platform engineering, or cloud security experience
• Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity
• Experience operating private, regulated, or enterprise AWS environments
• Strong infrastructure-as-code experience with Terraform; CloudFormation or AWS CDK experience is beneficial
• Experience with GitHub Actions or comparable CI/CD platforms
• Proficiency with AWS CLI, Linux, Python, PowerShell, and Bash automation
• Understanding of identity federation (SAML/OIDC), secrets management, certificates, encryption, and least-privilege access
• Ability to troubleshoot across cloud infrastructure, networking, security, application, and on-premises boundaries
• Experience with monitoring, incident response, change management, and production operations

Technologies

• AWS
• Terraform
• AWS CloudFormation
• AWS CDK
• AWS CLI
• Python
• PowerShell
• Bash
• GitHub Actions
• GitHub-based CI/CD pipelines
• EC2
• S3
• RDS
• MWAA
• Airflow
• Lambda
• ALB/NLB
• Cognito
• Route 53
• Secrets Manager
• Systems Manager
• IAM
• KMS
• CloudTrail
• CloudWatch
• VPC Flow Logs
• AWS Config
• SNS
• VPC endpoints
• PrivateLink
• Cloud WAN
• DNS
• Private connectivity
• Private VPC/spoke architecture
• Linux
• SAML/OIDC
• Private application access
• AWS MWAA/Airflow
• RDS PostgreSQL
• Identity federation
• Certificate management

Preferred

• AWS Solutions Architect, DevOps Engineer, Security, or Advanced Networking certification
• Experience with AWS MWAA, Airflow, Cognito, RDS PostgreSQL, Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS
• Experience supporting healthcare, government, or other regulated workloads

Location: Dallas, TX (remote)

Experience: 8+ years