Design, build, and maintain secure, automated AWS cloud-native environments (serverless APIs, event-driven workflows, containerized services). Implement IaC, GitLab CI/CD pipelines, security controls, observability, and production-grade operations for highly reliable, governed systems. Support databases, networking, and incident readiness while partnering with engineering and security stakeholders.
DevSecOps Engineer / AWS Cloud Engineer (Serverless, CI/CD, IaC, ECS Fargate)
Location: Remote
Role Summary
We are seeking a highly skilled AWS Cloud / DevSecOps Engineer to design, build, and maintain secure, scalable, highly automated cloud-native environments on AWS. This role will lead the engineering of production-grade serverless APIs, event-driven workflows, and containerized services, while embedding security and operational excellence into every stage of the delivery lifecycle (infrastructure, pipelines, runtime, and monitoring). You will partner closely with application engineers (frontend and backend), architects, and security stakeholders to deliver mission-critical systems with strong reliability, performance, and governance.
Key Responsibilities
Cloud architecture & delivery
Location: Remote
Role Summary
We are seeking a highly skilled AWS Cloud / DevSecOps Engineer to design, build, and maintain secure, scalable, highly automated cloud-native environments on AWS. This role will lead the engineering of production-grade serverless APIs, event-driven workflows, and containerized services, while embedding security and operational excellence into every stage of the delivery lifecycle (infrastructure, pipelines, runtime, and monitoring). You will partner closely with application engineers (frontend and backend), architects, and security stakeholders to deliver mission-critical systems with strong reliability, performance, and governance.
Key Responsibilities
Cloud architecture & delivery
- Design and implement cloud-native architectures on AWS, emphasizing serverless-first patterns where appropriate.
- Build and maintain production-ready serverless APIs using AWS Lambda, API Gateway, and related integration patterns (authorizers, throttling, request validation, WAF integration as needed).
- Create event-driven workflows and orchestration using AWS Step Functions, including retries, error handling, idempotency, and observability.
- Design and maintain containerized workloads using Docker and Amazon ECS on Fargate, including task definitions, scaling, service discovery, and secure networking.
- Develop and manage infrastructure using AWS CloudFormation (and/or complementary IaC practices as applicable), ensuring reusability, composability, and environment parity (dev/test/prod).
- Implement guardrails for consistent provisioning: tagging standards, baseline security controls, secrets handling, and standardized logging/monitoring.
- Manage VPC, subnets, routing, security groups, NACLs, endpoints, and connectivity patterns for secure, least-privilege architectures.
- Build and maintain GitLab CI/CD pipelines for automated testing, security checks, deployments, and rollbacks across multiple environments.
- Automate release workflows for serverless and container platforms (blue/green or canary strategies where applicable).
- Implement pipeline-integrated security controls (e.g., dependency scanning, container scanning, IaC scanning, policy-as-code where applicable) and ensure audit-ready traceability.
- Architect secure AWS environments leveraging IAM (least privilege, role-based access, permission boundaries where useful), encryption (KMS), and secure secrets management.
- Implement logging and detection best practices using services such as CloudWatch Logs/Metrics/Alarms, CloudTrail, and centralized log aggregation patterns.
- Ensure secure configuration and operational readiness: patching/immutability strategies, secure image practices, runtime hardening, and incident response readiness.
- Design and maintain MySQL / Amazon RDS environments, including backups, parameter tuning, maintenance windows, read replicas (if needed), and secure connectivity.
- Support application teams with data-access patterns, migrations, and reliability considerations (connection management for serverless, pooling/proxy patterns where applicable).
- Hands-on expertise building serverless solutions with AWS Lambda, API Gateway, and Step Functions in production.
- Strong experience with AWS CloudFormation for provisioning and managing environments.
- Strong CI/CD experience, specifically building and operating GitLab CI/CD pipelines.
- Strong container expertise with Docker and running workloads on ECS Fargate (services, tasks, scaling, networking).
- Demonstrated experience architecting secure AWS environments using IAM, VPC/networking, encryption, and logging/auditing best practices.
- Experience designing/operating MySQL / Amazon RDS in production.
- Strong scripting/automation skills (e.g., Python and/or Bash) to streamline workflows and reduce toil.
- Ability to collaborate effectively with frontend/backend engineering teams and translate requirements into secure, automated platform capabilities.
- Security+ or higher certification
- AWS Cloud Practitioner certification or higher
- TS security clearance or the ability to obtain one
- Familiarity with AWS CDK or Terraform (even if CloudFormation remains primary).
- Experience with API security patterns: OAuth/OIDC integration, JWT authorizers, rate limiting/throttling, WAF, mTLS (where required).
- Experience with secrets management (e.g., AWS Secrets Manager / SSM Parameter Store) and key management (KMS).
- Observability stack experience beyond basics: structured logging, tracing (e.g., X-Ray/OpenTelemetry patterns), metrics-driven alerting.
- Experience implementing policy-as-code and governance (e.g., SCPs/Organizations, config rules, control frameworks).
- Experience with performance/cost optimization for serverless and Fargate workloads.
- Prior experience in regulated environments requiring audit evidence and secure SDLC controls.
- DevSecOps mindset: security and automation as first-class design principles.
- Systems thinking: understands tradeoffs across reliability, latency, cost, and security.
- Engineering rigor: version control, reviews, testing, change management, and documentation.
- Operational ownership: can carry systems from build → run with strong on-call hygiene.
- Clear communication: able to explain architecture decisions to technical and non-technical stakeholders.
Similar Jobs
Artificial Intelligence • Consumer Web • Digital Media • Fintech • Marketing Tech • Software • Financial Services
Lead and build the DevSecOps function: implement SOC 2 controls, automate compliance and evidence pipelines, own cloud security posture, CI/CD security gates, vulnerability management, and AI-assisted auto-remediation to embed security as code across the developer lifecycle.
Top Skills:
Ai/LlmAspmCi/CdContainer ScanningCspmDrataIac ScanningIamInfrastructure-As-CodeKey ManagementLoggingMulti-CloudPrisma CloudSastSbomScaSecret ScanningSIEMSnykSoc 2TerraformVantaWiz
Fintech
Designs and implements secure, fully automated cloud CI/CD pipelines and infrastructure-as-code. Collaborates with architecture, security, QA, and engineering teams to automate builds, tests, deployments, observability, and incident response. Develops Ansible, Terraform, Packer scripts, pipelines-as-code (YAML), and tools to improve reliability, security, and deployment velocity while ensuring compliance and documentation.
Top Skills:
AksAnsibleAWSAzureAzure DevopsCdkCloudFormationCloudwatchDatadogDockerDynatraceEcsEksGitHashicorp VaultJenkinsKubernetesNew RelicOpenshiftOpentelemetryPackerPythonServerlessServicenowTerraformYaml
Healthtech • Database
Enable and implement DevSecOps practices: design and maintain CI/CD pipelines, automate infrastructure, integrate security tools, support cloud container platforms, troubleshoot DevSecOps platforms, collaborate with product and cloud teams, and promote Agile/DevSecOps adoption across the organization.
Top Skills:
AksAnsibleApacheAuroraAWSAzureCdnCloudsqlContrastCucumberjsDnsDockerDynatraceEcsEksElkFargateFirewallFtpGCPGitlabGitlab CiGradleGraphiteHarnessHl7Hp Service ManagerJavaJenkinsKeystoreKubernetesLoad BalancingMavenNagiosNginxOauth2.0PrometheusQualysRedisS3SeleniumServerlessServicenowSplunkSpring BootSQLTcp/IpTerraformTlsTomcatTruststoreTwistlockUnix/LinuxVeracodeVpcWeblogicWindows ServerWizioXML
What you need to know about the Seattle Tech Scene
Home to tech titans like Microsoft and Amazon, Seattle punches far above its weight in innovation. But its surrounding mountains, sprinkled with world-famous hiking trails and climbing routes, make the city a destination for outdoorsy types as well. Established as a logging town before shifting to shipbuilding and logistics, the Emerald City is now known for its contributions to aerospace, software, biotech and cloud computing. And its status as a thriving tech ecosystem is attracting out-of-town companies looking to establish new tech and engineering hubs.
Key Facts About Seattle Tech
- Number of Tech Workers: 287,000; 13% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Amazon, Microsoft, Meta, Google
- Key Industries: Artificial intelligence, cloud computing, software, biotechnology, game development
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Madrona, Fuse, Tola, Maveron
- Research Centers and Universities: University of Washington, Seattle University, Seattle Pacific University, Allen Institute for Brain Science, Bill & Melinda Gates Foundation, Seattle Children’s Research Institute
