Job Description
Contract 4 months
Remote: 100% remote
No Business travels
Equipment: Bring your own device.
Role Mission: Automate and harden the entire AWS stack supporting the data platform — guaranteeing every deployment is reproducible, auditable, and SOC 1-ready.
Main Responsibilities:
- IaC Ownership: End-to-end provisioning via Terraform/CloudFormation (VPCs, IAM, Redshift, Glue, DMS, S3, KMS).
- CI/CD Pipelines: Git-driven workflows (CodePipeline / GitHub Actions) for infra + ETL code; built-in testing and approval gates.
- Compliance Automation: Integrate AWS Config, CloudTrail, GuardDuty, and Security Hub for evidence generation.
- Monitoring & Ops: Centralized logging (CloudWatch), automated cost tracking, and environment health dashboards.
- Handover Package: Documented IaC modules, CI/CD templates, and compliance logbook.
- 5+ years DevOps / Platform Engineering experience with a focus on AWS.
- Expert in Terraform modules and modular CI/CD design, with IAM least-privilege setups.
- Understanding of SOC 1 change-control and evidence collection.
- Python or Bash scripting for deployment orchestration.
- AWS Certified DevOps Engineer or SysOps Admin certification is a plus.
- Experience in establishing auditable deployment workflows.
- Familiarity with security automation tools.