AWS DevSecOps Engineer
Role Overview
The AWS DevSecOps Engineer builds, secures, and operates the AWS environments and automated delivery pipelines that PhoenixTeam uses for internal and client applications.
This is a hands-on production engineering role spanning infrastructure as code, container deployment, CI/CD, security controls integrated into releases, reliability, and incident recovery.
The engineer uses shared Platform patterns to make deployment repeatable rather than relying on one-off application setups.
Agentic orchestration is a primary delivery approach: the engineer designs, supervises, and verifies AI-assisted workflows for testing, hardening, containerization, infrastructure provisioning, and deployment.
Success depends on independent AWS, DevSecOps, and security judgment—especially when generated scripts or configurations are wrong.
The goal is to improve speed and reliability from prototype through production without bypassing security reviews or release controls.
Key Skills for This Role
Full Job Posting
Minimum Qualifications
- 5+ years of hands-on DevOps, DevSecOps, site reliability, or platform engineering experience, including production responsibility, infrastructure automation, and deployment or incident recovery.
- Strong production AWS experience spanning VPC/networking, IAM, ECS or EKS, RDS, KMS, secrets management, CloudWatch, and CloudTrail.
- Experience deploying containerized workloads with Docker and building production infrastructure as code using Terraform, AWS CDK, or CloudFormation.
- Experience owning CI/CD pipelines as code, including automated testing, security gates, release promotion, troubleshooting, and rollback.
- Hands-on experience integrating SAST, DAST, SCA/dependency, container, and infrastructure-as-code security checks into delivery workflows.
- Ability to script automation in Python, Bash, or Go and independently validate generated scripts and infrastructure configurations.
- Practical understanding of least-privilege access, encryption, secure credential handling, and NIST SP 800-53 or a comparable security-control framework.
- Ability to supervise and verify AI-assisted engineering workflows with independent judgment; clear written and verbal communication with technical and non-technical partners.
- Preferred Qualifications or Skills
- Experience with LLM-assisted or multi-agent engineering automation, including Amazon Bedrock or comparable orchestration tools.
- AWS multi-account landing-zone expertise; policy-as-code or guardrails using OPA, Checkov, cfn-guard, SCPs, or comparable controls.
- Experience supporting SOC 2 or other applicable commercial security assessments and automated audit evidence.
- Relevant AWS professional, cloud security, or security engineering certification.
- Client-facing delivery in mortgage, financial services, or another regulated industry; experience mentoring engineers in reliable pipeline practices.
- Position Details
- Employment type: Full-Time, W2 employee; not a contract or 1099 position.
- Work arrangement: Remote-first, with flexible arrangements and collaboration across engineering and client teams.
- On-call: Participation in a rotating schedule to support production systems and incident response is required; coverage details will be discussed during hiring.
- Travel: Up to 10% may be required based on business or client needs.
Preferred Qualifications
- Preferred Qualifications or Skills
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at PhoenixTeam
Salesforce Product Manager - Agentforce & Data Cloud
Arlington, USA
AI Quality Engineer
, USA
Product Lead
, USA
Salesforce Product Manager - Agentforce & Data Cloud
Arlington, USA
Product Manager
, USA
AWS Windows Infrastructure Engineer
, USA
Senior Technical Writer
, USA
Engineering Lead
, USA