Senior DevOps Engineer, AWS/Windows

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, alter, and sustain AWS infrastructure and services utilizing Terraform.

• Develop Terraform modules and configurations while managing state across different environments.

• Implement infrastructure modifications through GitHub Actions and AWS CodeBuild pipelines.

• Construct and oversee AWS environments that host Windows Server and IIS applications operating on .NET.

• Manage EC2 instances, load balancers, AWS WAF, Route 53, IAM, and TLS certificates using Terraform.

• Transition on-premises Windows applications to AWS.

• Containerize eligible applications on Amazon ECS.

• Automate the renewal of certificates, rotation of service account credentials, patching, and service restarts using Terraform, PowerShell, and AWS Systems Manager.

• Establish self-service operational capabilities for application owners wherever feasible.

• Diagnose and resolve issues related to IIS, .NET, networking, and AWS services, addressing underlying causes in code.

• Develop and optimize Amazon CloudWatch monitoring, including metrics, logs, alerts, dashboards, and Windows CloudWatch agents.

• Define service-level objectives and alerts.

• Collaborate with the security team to address vulnerabilities and implement hardening standards.

• Review Terraform and pipeline modifications from team members, assisting in the establishment of infrastructure-as-code and deployment standards.

• Partner with application owners, software developers, and security teams.

• Take ownership of projects from design to operational stages.

• Occasionally conduct planned maintenance after hours or troubleshoot outages impacting services.

⛳️ Requirements

• BA/BS degree with 7+ years of relevant IT experience, or equivalent experience.

• At least 3 years of practical DevOps or cloud engineering experience in AWS supporting production workloads.

• Minimum of 3 years utilizing Terraform to create, modify, and automate AWS infrastructure, including module writing, safe configuration changes, and remote state management.

• Proven experience in building and maintaining CI/CD pipelines using GitHub Actions, AWS CodeBuild, or similar platforms.

• Proficient with Git branching and pull request workflows.

• Hands-on expertise with AWS EC2, VPC, IAM, S3, Elastic Load Balancing, Route 53, and Systems Manager.

• Experienced in implementing Amazon CloudWatch monitoring, including metrics, logs, alerts, dashboards, and the CloudWatch agent on Windows servers.

• Over 3 years of support experience in Windows Server and IIS environments hosting .NET applications, covering deployment, configuration, TLS certificates, and troubleshooting.

• Strong skills in PowerShell scripting.

• Familiarity with Python or Bash scripting.

• Capability to work independently on complex issues and communicate effectively with both technical and non-technical stakeholders.

• Must be able to obtain and maintain an NIH Public Trust clearance.

• US citizenship is not mandatory.

• Preferred: experience in migrating Windows and .NET applications from on-premises infrastructure to AWS.

• Preferred: experience in containerizing applications and deploying them on Amazon ECS.

• Preferred: knowledge of Application and Network Load Balancers, AWS WAF, CloudFront, and Route 53 routing policies.

• Preferred: experience with AWS Secrets Manager or Parameter Store and AWS Certificate Manager.

• Preferred: automation of patch and configuration management using SSM Patch Manager and State Manager, or PowerShell DSC.

• Preferred: experience with Datadog, including dashboards, SLO design, and alert tuning.

• Preferred: familiarity with CloudTrail, EventBridge, AWS X-Ray, or CloudWatch Synthetics.

• Preferred: knowledge of Amazon RDS for SQL Server.

• Preferred: certifications such as HashiCorp Terraform Associate, AWS Certified DevOps Engineer – Professional, or AWS Solutions Architect.

🏝️ Benefits

• Options for medical plans, including those with Health Savings Accounts.

• Choices of dental plan options.

• Vision plan availability.

• 401(k) plan with pre-tax and post-tax contributions and company matching.

• Flexible work weeks where feasible.

• Paid vacation, sick leave, personal time, holidays, parental leave, military leave, bereavement leave, and jury duty leave.

• Typically provides 15 days of paid leave each calendar year.

• Offers 10 paid holidays annually.

• Up to 160 hours of paid family leave available over a rolling 12-month period for eligible employees.

• Benefits for short-term and long-term disability.

• Life insurance coverage.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance.

• Option for remote work.