DevSecOps and Platform Engineer
Lohith Naidu RebelliUnited StatesMIDPosted 11m ago
AWSGitHubActionsAWSIAMAWSOIDCTerraformCloudFormationInfrastructureAsCodeCICDDevSecOpsPlatformEngineerDotNetDotNetCoreMSBuildAWSCloudSASTDASTSCAJFrogArtifactorySecretsManagementReleaseManagementCloudSecurityAmazonConnect
About the Role
We are looking for a DevSecOps and Platform Engineer to join our team. This role focuses on building and maintaining secure development platforms and pipelines, particularly for Amazon Connect applications.
Key Responsibilities
• Assess existing repositories, pipelines, scripts, manual deployment steps, and environment differences supporting Amazon Connect and related applications.
• Establish the approved GitHub repository structure, review practices, branching model, and promotion standards.
• Build the development reference pipeline and reusable patterns for approved application and Amazon Connect changes.
• Implement approved short-lived AWS access using OIDC and IAM, along with secrets handling and access separation.
• Integrate approved code, dependency, and infrastructure security checks into the delivery process and retain useful review evidence.
• Maintain artifact traceability, environment configuration, deployment approvals, and release records so promoted changes can be identified and reproduced.
• Develop infrastructure and configuration automation, drift checks, monitoring, and rollback procedures.
• Integrate .NET builds and automated test results with pipeline quality checks, working with application engineers and QA.
• Support agency-authorized pipeline rollout and troubleshoot approved deployment activities with agency DevOps teams.
• Transfer pipeline operation, environment recovery, configuration maintenance, and release procedures to M&O.
Requirements
• Hands-on GitHub Actions, AWS IAM and OIDC, infrastructure as code, and secure deployment automation.
• Experience with .NET build and packaging workflows, automated checks, artifact management, and release controls.
• Experience diagnosing deployment and environment issues through logs, configuration comparison, and controlled rollback.
• Ability to produce reusable platform templates, operating procedures, and practical technical handover.