About the role:
We are looking for a hands-on AWS DevOps Lead to own and evolve our cloud platform and lead a blended onsite and offshore team of 5–10 engineers. You will set the vision and roadmap for AWS infrastructure, DevOps, and CI/CD, while staying technical enough to design, build, and troubleshoot the platform yourself. As part of the Platforms & Engineering team, you will partner with IT stakeholders to cloud-enable their systems, keep our AWS environment secure and well governed, and make sure the team delivers reliably. This role suits a leader who is equally comfortable whiteboarding a multi-account network design, reviewing a pipeline, and running a team stand-up.
Key responsibilities:- Leadership and vision
- Define the vision, roadmap, and standards for AWS infrastructure, DevOps, and CI/CD across the Platforms & Engineering team.
- Lead, mentor and grow a team of 5–10 FTEs and contractors across onsite and offshore locations.
- Plan and assign work, set priorities, track delivery and remove blockers so commitments are met on time.
- Build a culture of automation, ownership, documentation and continuous improvement.
- Manage contractor and vendor resources, including onboarding, quality of delivery and knowledge transfer.
- AWS infrastructure and architecture
- Design, build and maintain secure, scalable and cost-effective AWS environments using services such as EC2, ECS/EKS, Lambda, S3, RDS, IAM, CloudWatch and CloudFormation.
- Own the AWS network architecture: VPC design, subnets, routing, Transit Gateway, VPC peering, Private
- Link, Direct Connect / site-to-site VPN, DNS (Route 53), load balancing, and hybrid connectivity.
- Drive Infrastructure as Code (Terraform/Terragrunt and/or CloudFormation/CDK) as the standard for all provisioning.
- Hands-on experience authoring Terraform modules from scratch, not just consuming existing ones.
- Lead multi-account strategy and governance using AWS Organizations, Control Tower, and landing zone patterns.
- Ensure high availability, disaster recovery, backup, and resilience of cloud workloads.
- Monitor and optimize cloud spend through tagging, rightsizing and FinOps practices.
- DevOps, GitHub and CI/CDOwn GitHub administration: organizations, repositories, branching strategy, access controls and GitHub Actions.
- Design and maintain CI/CD pipelines that deliver fast, repeatable and secure releases.
- Standardize build, test, deployment, and release practices across teams.
- Implement observability: monitoring, logging, alerting, and incident response runbooks.
- Cloud security
- Embed security in every layer of the AWS platform, working with the Cybersecurity team.
- Implement and manage IAM least-privilege, SCPs, KMS encryption, Secrets Manager, Security Groups, and NACLs.
- Use AWS security services such as GuardDuty, Security Hub, AWS Config, CloudTrail, Inspector, and WAF.Integrate DevSecOps practices into pipelines, including code, dependency, container and IaC scanning.
- Support audits, compliance requirements and remediation of security findings.
- Stakeholder partnership
- Work closely with IT stakeholders and application owners to migrate, cloud-enable, and support their systems on AWS.Translate business and application needs into infrastructure designs, estimates, and delivery plans.
- Communicate status, risks, and roadmap clearly to senior leadership and partner teams.
Required qualifications:
Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience.10+ years in infrastructure, cloud, or DevOps engineering, with 5+ years of hands-on AWS experience.3+ years leading technical teams, including managing contractors and onsite/offshore delivery.
Deep expertise in AWS networking: VPC design, Transit Gateway, hybrid connectivity, DNS, and routing.
Strong hands-on experience with core AWS compute, storage, database, and serverless services.
Proven experience with Infrastructure as Code (Terraform/Terragrunt, CloudFormation, or CDK).Strong background in GitHub administration, GitHub Actions, and CI/CD pipeline design.
Solid knowledge of AWS security services, IAM, and cloud security best practices.
Scripting skills in Python, Bash, or PowerShell.
Experience with containers and orchestration (Docker, ECS and/or EKS).Excellent communication skills and the ability to influence technical and non-technical stakeholders.
Exposure to FinOps practices and cloud cost management tools.
Preferred qualifications:
Experience with Amazon Bedrock and integrating generative AI services into enterprise platforms and applications.
Familiarity with AI/ML infrastructure on AWS, such as SageMaker, vector stores, and secure model access patterns.
AWS certifications such as Solutions Architect – Professional, DevOps Engineer – Professional, Advanced Networking – Specialty, or Security – Specialty.
Experience in regulated industries such as financial services or insurance.
Knowledge of security and compliance frameworks such as NIST, CIS Benchmarks, SOC 2 or ISO 27001.
