Senior AWS DevSecOps & Next.js Consultant – Security & Infrastructure Audit

Project Overview

We are seeking a highly skilled and certified AWS Cloud Security & Frontend Engineer to conduct an intensive and comprehensive security assessment, infrastructure mapping, functional review and technical documentation of our platform.

The business operates on Amazon Web Services (AWS) infrastructure, with Next.js cloud-based web applications, integrated Machine Learning APIs and a MySQL backend database.

The target delivery window is 1–2 weeks.

Scope of Work & Key Deliverables

• Application & Frontend Security Assessment: Evaluate Next.js codebases, Server-Side Rendering (SSR) security, API routes and frontend security controls against recognised industry standards, including OWASP Top 10 and CIS Benchmarks.
• AWS Infrastructure & Database Audit: Conduct a comprehensive security assessment of our AWS environment, including Amazon CloudFront, AWS Lambda, SST/OpenNext and MySQL database instances, against the AWS Well-Architected Framework.
• ML API & Process Mapping: Audit the configuration, access controls, data pipelines and deployment processes associated with our Machine Learning APIs.
• Access & Repository Controls: Assess repository security, Git workflows, environment-variable configuration and remote security access protocols, including VPNs and IAM roles.
• Asset Discovery & Mapping: Identify and visually map all active cloud, database and Machine Learning assets and their relationships.
• CMS Provisioning & Maintenance Plan: Provision or audit a Content Management System (CMS) integrated with the application and develop a practical strategy for future upgrades, maintenance and security.
• Technical Documentation: Deliver a comprehensive Technical Analysis Report, automated infrastructure and architecture diagrams covering all identified assets, together with clear and actionable Operational Guides.

Required Experience & Technical Qualifications

• Core Credentials: Candidates should hold relevant advanced certifications, such as AWS Certified Developer – Associate, AWS Certified Security – Specialty, AWS Certified Machine Learning – Specialty, or an equivalent recognised certification. Experience with Vercel and Next.js is highly desirable.
• Next.js & Frontend: Deep expertise in Next.js architecture and deployment patterns on AWS, including SST, OpenNext and AWS Amplify, together with secure environment-variable management and injection.
• Data & ML Systems: Proven experience auditing MySQL databases, including access controls, encryption at rest and in transit, as well as configuring and securing production-ready Machine Learning APIs.
• AWS Security: Strong practical knowledge of AWS security architecture, IAM, networking, access controls, cloud infrastructure and security best practices.
• Documentation & Communication: Exceptional technical writing and communication skills, with the ability to document complex data flows, process maps, infrastructure and architecture clearly.

What We’re Looking For

We are looking for someone who can work independently, assess the existing environment quickly and provide practical, technically robust recommendations within a 1–2 week delivery period.

If you are passionate about securing modern cloud infrastructures while supporting innovative web and Machine Learning solutions, we would love to hear from you.

Your expertise will help us build secure, resilient and scalable technology platforms designed to deliver innovative solutions to users worldwide.

Work Location: Remote