Senior DevOps / Cloud Infrastructure Engineer (AWS / IaC Lead)

Core Technical Skills

• Infrastructure as Code (IaC): Advanced proficiency in Terraform (declarative modular design, state management, remote backends, and multi-environment orchestration).

• AWS Cloud Architecture: Deep expertise in core AWS services within multi-account topologies:

• Compute & Containerization: AWS ECS Fargate, ECR, Docker multi-stage builds.
• Database Infrastructure: Amazon Aurora PostgreSQL (multi-AZ failover, read replicas, connection pooling, and performance tuning).

• Networking & Edge: VPC design, subnets, NAT Gateways, Security Groups, VPC Endpoints, and AWS API Gateway routing.

• Security & KMS Policy Hardening:

• Practical experience implementing AWS KMS envelope encryption (AES-256-GCM) for sensitive payload handling.
• Deep knowledge of AWS IAM (least-privilege policies, role assumption, permission boundaries) and AWS Secrets Manager.
• Compliance awareness (PCI-DSS principles, Class 14 data classification, log masking, zero-plaintext storage).CI/CD & Automation:
• Designing automated delivery pipelines in GitHub Actions.

• Pipeline integration for database migrations (apps/migration-runner), TypeORM integration tests, and monorepo workflows.

• Observability & Monitoring:

• Setting up metrics, alarms, and tracing via CloudWatch, AWS X-Ray, or third-party observability platforms (e.g., Datadog).
• Automated alert routing for state-machine drift, database locks, and latency spikes.

Key Domain & System Design Capabilities

• Financial/Transactional Systems: Familiarity with high-concurrency payment gateway patterns (e.g., transactional outbox workers, optimistic locking, idempotent operations, and webhook ingress handling).
• High Availability & Disaster Recovery: Designing self-healing infrastructure, zero-downtime deployment strategies, and automated DB backup/restore validation.Professional & Soft Skills
• Technical Leadership: Ability to own infrastructure decisions, author RFCs/specifications, and mentor junior/mid-level engineers.
• DevSecOps Culture: Proactive mindset toward security shift-left—automating vulnerability scanning, dependency auditing, and terraform linting (tflint, tfsec) into CI pipelines.