Senior DevOps Engineer (AWS)

We are hiring a Senior DevOps Engineer to own the AWS platform behind our .NET and React products, from infrastructure as code to production reliability.You will work across our frontend, backend, QA and infrastructure tracks. The platform runs .NET 10 services on ECS behind ALB and API Gateway, with Lambda, SQS, DynamoDB, Aurora MySQL, Cognito and CloudWatch. You will set the standards for how we build, ship, secure and run it Key responsibilities You own the platform end to end: how it is provisioned, deployed, observed, secured and paid for. Infrastructure and architecture Design, build and maintain AWS environments (VPC, subnets, NAT, Transit Gateway, Route 53) across dev, QA, staging and production accounts. Run containerised .NET 8 workloads on ECS (Fargate and EC2), fronted by ALB and API Gateway. Support serverless components: Lambda, SQS, SNS, EventBridge, Step Functions and DynamoDB. Operate Aurora MySQL: parameter groups, backups, read replicas, failover and Global Database where needed. Contribute to multi-region and active-active designs, including data replication, routing and failover testing. Infrastructure as code Define all infrastructure in Terraform or AWS CDK; no manual console changes in shared environments. Build reusable modules, enforce code review on infrastructure changes and manage state safely. CI/CD and release engineering Build and maintain pipelines (GitHub Actions, Azure DevOps or AWS CodePipeline) for .NET APIs, React frontend and Lambda functions. Implement blue/green and canary deployments, automated rollbacks and database migration steps. Integrate quality gates: unit tests, SAST, dependency and container image scanning Observability and reliability Set up logging, metrics, tracing and alerting with CloudWatch, X-Ray and OpenTelemetry (Grafana or Datadog a plus). Define SLOs and alerts with the engineering leads; lead incident response and blameless post-mortems. Own backup, disaster recovery and RTO/RPO testing. Security and compliance Manage IAM with least privilege, AWS Organizations, SCPs and SSO / Identity Center. Handle secrets with Secrets Manager / Parameter Store and encryption with KMS. Run WAF, Shield, GuardDuty, Security Hub and AWS Config; close findings within agreed timelines. Support Cognito-based authentication setup and environment hardening. Cost and governance Track and reduce AWS spend: tagging standards, rightsizing, Savings Plans, budgets and anomaly alerts. Report monthly cost and reliability figures to engineering management. People and practice Mentor developers and junior DevOps engineers; write runbooks and platform documentation. Partner with backend, frontend and QA leads so teams can self-serve environments and deployments. Required qualifications 5+ years in DevOps, SRE or cloud infrastructure roles, with 3+ years running production workloads on AWS. Deep hands-on experience with ECS, ALB, API Gateway, Lambda, SQS, DynamoDB, RDS/Aurora MySQL, Cognito, CloudWatch, IAM and VPC networking. Strong Terraform or AWS CDK skills, including module design and remote state management. Docker expertise: multi-stage builds, image optimisation, ECR and image scanning. Built and owned CI/CD pipelines for at least one of .NET, Node.js/React or serverless workloads. Scripting in Bash plus one of Python, PowerShell or C#. Solid Linux administration and networking fundamentals (DNS, TLS, load balancing, routing, security groups). Production on-call experience: incident handling, root cause analysis and post-mortems. Working knowledge of AWS security services and least-privilege IAM design. Git workflows (trunk-based or GitFlow), pull-request reviews and branch protection. Bachelor's degree in Computer Science or a related field, or equivalent experience.