DevOps Engineer

Job Description: Senior DevSecOps Engineer – AWS / GitHub Advanced Security

We are seeking a senior, hands-on DevSecOps Engineer with strong experience setting up, configuring, and managing GitHub repositories, GitHub Actions pipelines, GitHub Advanced Security, AWS cloud deployments, and CloudFormation Infrastructure as Code (IaC).The ideal candidate will have a solid background in integrating security into software development and deployment processes, automating CI/CD workflows, managing infrastructure provisioning, and implementing DevSecOps best practices across AWS environments. This is a hands-on technical engineering role, requiring practical experience in configuration, implementation, troubleshooting, automation, and security integration rather than a purely architectural or management-focused background. Primary Technical SkillsGitHub: Repository administration, branch protection, access management, pull requests, and code reviews. GitHub Actions: CI/CD pipeline design, configuration, automation, and maintenance. GitHub Advanced Security (GHAS): Code scanning, secret scanning, dependency review, and security vulnerability remediation. AWS Cloud: Cloud infrastructure management, deployments, security, and operational support. AWS CloudFormation: Infrastructure as Code, reusable templates, stack management, and automated provisioning. DevSecOps: Integrating security checks into development, build, testing, and deployment pipelines. CI/CD Automation: Automated builds, testing, security validation, releases, and deployments. Software Development Processes: Secure SDLC, version control, code quality, change management, and release governance. Key Responsibilities1. GitHub Administration and Repository Management Set up and manage GitHub organizations, repositories, teams, and access permissions. Configure branch protection rules, pull request workflows, and code review policies. Implement repository governance, access controls, and security best practices. Manage repository settings and support development teams with GitHub workflows. Establish consistent development standards across multiple repositories.2. GitHub Actions and CI/CD Pipelines Design, develop, configure, and maintain GitHub Actions workflows. Automate application builds, testing, security scans, and AWS deployments. Develop reusable workflows and pipeline components to standardize CI/CD processes. Configure workflow triggers, environment variables, secrets, and deployment approvals. Troubleshoot pipeline failures and optimize workflow performance. Implement secure authentication between GitHub Actions and AWS, preferably using OpenID Connect (OIDC) where applicable.3. GitHub Advanced Security Configure and manage GitHub Advanced Security capabilities across repositories. Implement code scanning using CodeQL and other supported security tools. Configure secret scanning, push protection, and dependency vulnerability detection. Integrate security checks into GitHub Actions workflows. Analyze security findings, prioritize vulnerabilities, and coordinate remediation with development teams. Establish security policies and reporting processes to improve application security posture.4. AWS Cloud Deployments Manage automated deployments of applications and infrastructure to AWS environments. Configure deployment workflows for development, testing, staging, and production environments. Apply AWS IAM permissions and least-privilege access principles. Integrate GitHub Actions with AWS services using secure authentication mechanisms. Troubleshoot deployment failures, permissions issues, and infrastructure-related problems. Support secure and reliable cloud release processes.5. CloudFormation Infrastructure as Code Develop, maintain, and manage AWS CloudFormation templates. Automate infrastructure provisioning and configuration through Infrastructure as Code. Create reusable templates and parameterized configurations for multiple environments. Manage CloudFormation stacks, updates, dependencies, and deployment failures. Implement infrastructure validation and security checks before deployment. Follow IaC best practices for consistency, reusability, security, and maintainability.6. DevSecOps and Secure Development Processes Integrate security controls throughout the Software Development Life Cycle (SDLC).Implement automated security testing and vulnerability scanning within CI/CD pipelines. Establish secure coding, source control, and release management practices. Collaborate with application developers, cloud engineers, security teams, and QA teams. Support compliance requirements through appropriate security controls and audit trails. Continuously improve development automation, deployment reliability, and security governance.