{"schemaVersion":"jobsearcher.job.v1","id":"056222c59d1a6a4723a9d22b","url":"https://jobsearcher.com/jobs/056222c59d1a6a4723a9d22b","canonicalUrl":"https://jobsearcher.com/jobs/056222c59d1a6a4723a9d22b","title":"DevOps Engineer-AWS & Infrastructure","description":"About Lynk\r\nLynk is the inventor of satellite direct-to-device (D2D) technology, and holds the world's first commercial license from the FCC to operate a commercial D2D system. Lynk enables mobile network operators' subscribers to send and receive text messages via standard, unmodified mobile devices - directly from space. Our service has been tested and proven on all seven continents, has regulatory approvals in more than 30 countries, and is currently being deployed commercially through more than 40 MNO commercial service contracts covering approximately 50 countries. Our technology will enable all 8 billion people on the planet to stay connected with the existing standard phone in their pocket. Everywhere. No matter what.\r\nBy joining Lynk, you will have the opportunity to directly touch the lives of billions. Your mission will be to bring mobile broadband to billions, pull hundreds of millions out of poverty, and save countless lives.\r\nRole Overview\r\nThe DevOps Engineer is responsible for the design, reliability, and continuous improvement of Lynk's AWS cloud infrastructure. This role owns the full lifecycle of cloud environments - from infrastructure provisioning and CI/CD pipelines to security, compliance, and operational support. The position operates within a fast-paced, compliance-driven environment and requires both steady operational execution and proactive infrastructure improvement. CMMC Level 2 compliance is non-negotiable in everything you build.\r\nKey Responsibilities\r\nInfrastructure & Terraform\r\nDesign, build, and maintain AWS infrastructure using Terraform as the IaC standard across all environments (dev, staging, production)\r\nManage Terraform modules, state management, remote backends, and workspace strategy\r\nParticipate in architecture reviews and drive infrastructure optimization and cost management\r\nMaintain AWS Organizations or multi-account architecture as the environment scales\r\nCI/CD & Automation\r\nOwn and evolve CI/CD pipelines (GitLab CI or GitHub Actions) - from code commit to production deployment\r\nIdentify and implement automation opportunities to reduce manual operational overhead\r\nSupport and maintain deployment workflows for application and platform teams\r\nAWS Platform Operations\r\nManage core AWS services: EC2, ECS, S3, RDS, Lambda, SQS, SNS, CloudWatch, KMS, IAM, VPC, Route53, CloudFront\r\nDesign, deploy, and maintain serverless workloads using AWS Lambda - including function lifecycle management, concurrency, event source mappings, and cold-start optimization\r\nOperate and support AWS Ground Station for satellite communication scheduling, antenna management, and data downlink pipelines\r\nMonitor infrastructure health using Tenable for vulnerability and compliance scanning, CloudWatch for operational metrics, and PagerDuty or equivalent for alerting and incident response\r\nSecurity & Compliance\r\nEnforce infrastructure security posture aligned with CMMC Level 2 - IAM least privilege, encryption at rest/in transit, secrets management (AWS Secrets Manager, Parameter Store)\r\nManage team-based IAM access using AWS IAM Identity Center - permission sets, group assignments, account entitlements, and SCIM-based provisioning across the multi-account org\r\nUse Tenable to continuously assess infrastructure for vulnerabilities and maintain CMMC Level 2 compliance evidence\r\nManage certificate lifecycles, KMS key policies, and privileged access controls\r\nSupport audit activities with accurate, current documentation and evidence\r\nDocumentation & Cross-Functional Support\r\nMaintain SOPs, runbooks, and architecture diagrams\r\nCollaborate with engineering teams on capacity planning and platform reliability\r\nRequired Qualifications\r\n4+ years of DevOps/infrastructure engineering experience in AWS-native environments\r\nDeep hands-on Terraform experience - modules, state management, remote backends, workspace strategy\r\nProficient with AWS core services: EC2, ECS, S3, RDS, Lambda, SQS/SNS, IAM, VPC, CloudWatch, KMS\r\nStrong Linux/Unix administration and scripting (Bash, Python)\r\nCI/CD pipeline ownership - GitLab CI, GitHub Actions, or Jenkins\r\nServerless architecture and AWS Lambda - function design, event-driven patterns, IAM execution roles, and observability\r\nExperience with AWS Ground Station or other satellite ground segment infrastructure\r\nAWS IAM Identity Center - permission sets, group-to-account assignments, SCIM provisioning, and SSO integration\r\nExperience operating in CMMC Level 2 or equivalent DoD/regulated compliance environments\r\nSolid understanding of network fundamentals: VPC design, security groups, NACLs, peering, Transit Gateway\r\nComfortable working asynchronously and remotely without daily check-ins\r\nPreferred Qualifications\r\nAWS certifications (Solutions Architect, DevOps Engineer Professional, or Security Specialty)\r\nFamiliarity with Datadog, Grafana, or similar observability stacks\r\nExperience with database platforms: PostgreSQL, Aurora, or DynamoDB\r\nPrior work in defense, federal, or regulated industries (DoD, FedRAMP, CMMC, ITAR)\r\nExperience with AWS Organizations, Control Tower, or multi-account architectures\r\nInfrastructure cost optimization - Reserved Instances, Savings Plans, right-sizing\r\nExperience in a startup or small-team environment where ownership breadth is high\r\nBachelor's degree in Computer Science, engineering, or equivalent practical experience\r\nWhat \"Works Independently\" means here at Lynk\r\nIndependent operation is a core requirement, not a preference.\r\nSpecifically, this means:\r\nYou receive an objective, not a step-by-step plan. You define the approach.\r\nYou triage and prioritize your own backlog with limited daily oversight.\r\nWhen you hit a blocker, you exhaust reasonable paths before escalating.\r\nYou produce documentation and runbooks as a matter of habit, not when asked.\r\nYou proactively flag risks, degraded performance, and technical debt before they become incidents.\r\nYou deliver on commitments and communicate early when scope or timelines shift.\r\nBenefits\r\nCompetitive compensation benchmarked to US market rates\r\nMedical, dental, and vision coverage\r\nPaid Time Off and federal holidays\r\nOpportunity for growth within a fast-moving, mission-driven technology company\r\nLynk is an equal opportunity employer. We do not discriminate on the basis of race, religion, sex, sexual orientation, age, disability, national origin, or any other basis protected under applicable law. All employment decisions are based on qualifications, merit, and business needs. A background check will be conducted prior to formal hire.\r\nJ-18808-Ljbffr","company":"Linuxconfig","rawCompany":"linuxconfig","city":"Chantilly","state":"VA","isRemote":false,"isActive":false,"createdAt":"2026-07-04T02:42:35.312Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"DevOps Engineer-AWS & Infrastructure","description":"About Lynk\r\nLynk is the inventor of satellite direct-to-device (D2D) technology, and holds the world's first commercial license from the FCC to operate a commercial D2D system. Lynk enables mobile network operators' subscribers to send and receive text messages via standard, unmodified mobile devices - directly from space. Our service has been tested and proven on all seven continents, has regulatory approvals in more than 30 countries, and is currently being deployed commercially through more than 40 MNO commercial service contracts covering approximately 50 countries. Our technology will enable all 8 billion people on the planet to stay connected with the existing standard phone in their pocket. Everywhere. No matter what.\r\nBy joining Lynk, you will have the opportunity to directly touch the lives of billions. Your mission will be to bring mobile broadband to billions, pull hundreds of millions out of poverty, and save countless lives.\r\nRole Overview\r\nThe DevOps Engineer is responsible for the design, reliability, and continuous improvement of Lynk's AWS cloud infrastructure. This role owns the full lifecycle of cloud environments - from infrastructure provisioning and CI/CD pipelines to security, compliance, and operational support. The position operates within a fast-paced, compliance-driven environment and requires both steady operational execution and proactive infrastructure improvement. CMMC Level 2 compliance is non-negotiable in everything you build.\r\nKey Responsibilities\r\nInfrastructure & Terraform\r\nDesign, build, and maintain AWS infrastructure using Terraform as the IaC standard across all environments (dev, staging, production)\r\nManage Terraform modules, state management, remote backends, and workspace strategy\r\nParticipate in architecture reviews and drive infrastructure optimization and cost management\r\nMaintain AWS Organizations or multi-account architecture as the environment scales\r\nCI/CD & Automation\r\nOwn and evolve CI/CD pipelines (GitLab CI or GitHub Actions) - from code commit to production deployment\r\nIdentify and implement automation opportunities to reduce manual operational overhead\r\nSupport and maintain deployment workflows for application and platform teams\r\nAWS Platform Operations\r\nManage core AWS services: EC2, ECS, S3, RDS, Lambda, SQS, SNS, CloudWatch, KMS, IAM, VPC, Route53, CloudFront\r\nDesign, deploy, and maintain serverless workloads using AWS Lambda - including function lifecycle management, concurrency, event source mappings, and cold-start optimization\r\nOperate and support AWS Ground Station for satellite communication scheduling, antenna management, and data downlink pipelines\r\nMonitor infrastructure health using Tenable for vulnerability and compliance scanning, CloudWatch for operational metrics, and PagerDuty or equivalent for alerting and incident response\r\nSecurity & Compliance\r\nEnforce infrastructure security posture aligned with CMMC Level 2 - IAM least privilege, encryption at rest/in transit, secrets management (AWS Secrets Manager, Parameter Store)\r\nManage team-based IAM access using AWS IAM Identity Center - permission sets, group assignments, account entitlements, and SCIM-based provisioning across the multi-account org\r\nUse Tenable to continuously assess infrastructure for vulnerabilities and maintain CMMC Level 2 compliance evidence\r\nManage certificate lifecycles, KMS key policies, and privileged access controls\r\nSupport audit activities with accurate, current documentation and evidence\r\nDocumentation & Cross-Functional Support\r\nMaintain SOPs, runbooks, and architecture diagrams\r\nCollaborate with engineering teams on capacity planning and platform reliability\r\nRequired Qualifications\r\n4+ years of DevOps/infrastructure engineering experience in AWS-native environments\r\nDeep hands-on Terraform experience - modules, state management, remote backends, workspace strategy\r\nProficient with AWS core services: EC2, ECS, S3, RDS, Lambda, SQS/SNS, IAM, VPC, CloudWatch, KMS\r\nStrong Linux/Unix administration and scripting (Bash, Python)\r\nCI/CD pipeline ownership - GitLab CI, GitHub Actions, or Jenkins\r\nServerless architecture and AWS Lambda - function design, event-driven patterns, IAM execution roles, and observability\r\nExperience with AWS Ground Station or other satellite ground segment infrastructure\r\nAWS IAM Identity Center - permission sets, group-to-account assignments, SCIM provisioning, and SSO integration\r\nExperience operating in CMMC Level 2 or equivalent DoD/regulated compliance environments\r\nSolid understanding of network fundamentals: VPC design, security groups, NACLs, peering, Transit Gateway\r\nComfortable working asynchronously and remotely without daily check-ins\r\nPreferred Qualifications\r\nAWS certifications (Solutions Architect, DevOps Engineer Professional, or Security Specialty)\r\nFamiliarity with Datadog, Grafana, or similar observability stacks\r\nExperience with database platforms: PostgreSQL, Aurora, or DynamoDB\r\nPrior work in defense, federal, or regulated industries (DoD, FedRAMP, CMMC, ITAR)\r\nExperience with AWS Organizations, Control Tower, or multi-account architectures\r\nInfrastructure cost optimization - Reserved Instances, Savings Plans, right-sizing\r\nExperience in a startup or small-team environment where ownership breadth is high\r\nBachelor's degree in Computer Science, engineering, or equivalent practical experience\r\nWhat \"Works Independently\" means here at Lynk\r\nIndependent operation is a core requirement, not a preference.\r\nSpecifically, this means:\r\nYou receive an objective, not a step-by-step plan. You define the approach.\r\nYou triage and prioritize your own backlog with limited daily oversight.\r\nWhen you hit a blocker, you exhaust reasonable paths before escalating.\r\nYou produce documentation and runbooks as a matter of habit, not when asked.\r\nYou proactively flag risks, degraded performance, and technical debt before they become incidents.\r\nYou deliver on commitments and communicate early when scope or timelines shift.\r\nBenefits\r\nCompetitive compensation benchmarked to US market rates\r\nMedical, dental, and vision coverage\r\nPaid Time Off and federal holidays\r\nOpportunity for growth within a fast-moving, mission-driven technology company\r\nLynk is an equal opportunity employer. We do not discriminate on the basis of race, religion, sex, sexual orientation, age, disability, national origin, or any other basis protected under applicable law. All employment decisions are based on qualifications, merit, and business needs. A background check will be conducted prior to formal hire.\r\nJ-18808-Ljbffr","datePosted":"2026-07-04T02:42:35.312Z","dateModified":"2026-07-04T02:42:35.312Z","hiringOrganization":{"@type":"Organization","name":"Linuxconfig","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chantilly","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"056222c59d1a6a4723a9d22b"},"url":"https://jobsearcher.com/jobs/056222c59d1a6a4723a9d22b"}}