DevOps Engineer || Hybrid - New York || 12+ Years Experience must

Job Title: DevOps Engineer / Cloud Platform Engineer

Location: NY - Hybrid 

Duration: Contract

Experience: 12 -14 Years

Job Overview

We are seeking an experienced DevOps Engineer / Cloud Platform Engineer with strong hands-on expertise in AWS, Terraform, CI/CD, Policy as Code, and cloud security.

The ideal candidate will have experience designing and automating secure AWS infrastructure, developing reusable Terraform modules, implementing CI/CD pipelines, and enforcing security and compliance controls through automated policies.

This is a hands-on engineering role focused on building secure, repeatable, and governed cloud infrastructure.

Key Responsibilities
Design, build, and maintain scalable AWS cloud infrastructure.
Develop reusable Terraform modules and manage Terraform state.
Build and maintain CI/CD pipelines using GitHub Actions and/or Jenkins.
Implement Infrastructure as Code validation, testing, governance, and deployment controls.
Implement Policy as Code using HashiCorp Sentinel and/or Open Policy Agent (OPA).
Develop automated policies for IAM, encryption, network security, tagging, public exposure, logging, and approved AWS services.
Integrate security and compliance checks into CI/CD pipelines.
Implement preventive and detective security controls across AWS environments.
Automate validation of Terraform plans before deployment.
Implement and manage AWS security services including IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, CloudWatch, and AWS Organizations.
Support multi-account AWS environments and enterprise landing zones.
Automate compliance monitoring and remediation.
Translate security and governance requirements into enforceable technical controls.
Support controls aligned with NIST, CIS, and AWS security best practices.
Troubleshoot infrastructure, deployment, security, and pipeline issues.
Collaborate with Cloud Architecture, Security, Development, and Operations teams.
Required Skills
Strong hands-on experience with AWS.
Strong experience with Terraform / Terraform Enterprise / HCP Terraform.
Experience developing reusable Terraform modules and managing state.
Strong Infrastructure as Code experience.
Experience with GitHub Actions and/or Jenkins.
Hands-on experience with Policy as Code.
Experience with HashiCorp Sentinel and/or OPA.
Strong understanding of AWS IAM, networking, encryption, logging, monitoring, and security.
Experience implementing security controls within automated deployment pipelines.
Knowledge of NIST and CIS security frameworks.
Strong scripting experience with Python, Bash, or PowerShell.
Understanding of Docker and Kubernetes/cloud-native environments.
Strong Git/GitHub/GitLab experience.
Preferred Skills
AWS Organizations
AWS Control Tower
AWS Service Control Policies (SCP)
AWS Config Rules
AWS Security Hub
AWS GuardDuty
Kubernetes / EKS
Docker
HashiCorp Vault
Secrets Management
SAST / DAST / Dependency Scanning
Container Security
Enterprise Cloud Landing Zones
Regulated enterprise / financial services experience
Ideal Candidate

The ideal candidate understands the complete cloud infrastructure lifecycle:

Code → Terraform → CI/CD → Policy Validation → Security Controls → Deployment → Continuous Compliance

Candidates should have hands-on implementation experience, not just keyword-level exposure to Policy as Code or cloud security.

Strong preference for candidates who have implemented Sentinel/OPA policies with Terraform and integrated security governance into CI/CD pipelines.

Thanks 

Navya