Job Summary:
We are seeking a highly capable and hands-on DevOps Engineer / DevOps Consultant to support critical cloud engineering, platform operations, and migration initiatives within a complex enterprise environment. This contract role requires a self-driven professional who can operate independently, take ownership of deliverables, and execute with minimal supervision while collaborating effectively across infrastructure, security, networking, and application teams.
The successful candidate will be responsible for designing, implementing, maintaining, and migrating secure, scalable, and highly available cloud infrastructure and deployment pipelines, with deep expertise in AWS, Terraform, CI/CD, containerization, Linux administration, networking, security integration, and observability platforms.
A key focus of this role will be to lead and support enterprise migration activities, including:
- AWS tenant migration from Org A to Org B
- Observability migration from Splunk to Google Observability and Google SecOps
- Complex network and security infrastructure changes, including Route 53, SSL/TLS certificate changes, Transit Gateway (TGW) updates, DNS server changes, Zscaler changes, and WAF changes
- Governance and security policy updates, including SCP (Service Control Policy) changes
- The ideal candidate will demonstrate strong technical depth, sound engineering judgment, and a commitment to security by design, shift-left engineering, cost optimization, standardization, and operational excellence.
Key Responsibilities:
- Design, deploy, and manage secure, scalable, and resilient cloud infrastructure using AWS services.
- Take a hands-on role in the implementation, troubleshooting, and optimization of infrastructure, automation, deployment pipelines, and production support activities.
- Lead and support AWS tenant migration activities, including the movement of infrastructure, services, configurations, and dependencies from Org A to Org B.
- Plan and execute migration tasks with strong attention to service continuity, dependency mapping, risk mitigation, rollback planning, and post-migration stabilization.
- Support the migration of observability and security monitoring platforms from Splunk to Google Observability and Google SecOps, including log routing, monitoring integration, alerting considerations, and operational transition.
- Design and execute complex network infrastructure changes, including:
- Route 53 updates and DNS cutover activities
- SSL/TLS and certificate changes
- Transit Gateway (TGW) changes
- DNS server changes
- Zscaler-related updates
- WAF configuration changes
- Implement and manage SCP (Service Control Policy) changes in alignment with organizational governance, security, and access control requirements.
- Architect and implement AWS networking solutions, including VPC, NAT Gateway, Transit Gateway, Route Tables, Route 53, Resolvers, and DNS configurations.
- Manage and optimize AWS services such as ACM, CloudFront, API Gateway, Athena, ECS, Lambda, Step Functions, and AWS Glue.
- Manage storage and data platform components, including EBS, RDS, MongoDB, Snowflake, and S3 / S3 Tables.
- Develop and maintain infrastructure as code using Terraform, with emphasis on modularity, reusability, governance, and compliance with engineering standards.
- Build, optimize, and troubleshoot GitLab CI/CD pipelines for automated build, testing, and deployment.
- Containerize applications using Docker and support deployment in containerized environments.
- Administer Linux-based systems, including system configuration, operational support, performance tuning, and troubleshooting.
- Automate operational and deployment activities using shell scripting and related scripting techniques.
- Collaborate with security teams to integrate security controls, vulnerability management, and policy enforcement into engineering workflows.
- Identify and implement cost-saving opportunities without compromising security, performance, or reliability.
- Standardize infrastructure modules, deployment patterns, and operating procedures to improve consistency and maintainability.
- Produce clear and accurate documentation covering architecture, migration runbooks, implementation procedures, operational workflows, and support handover materials.
- Work closely with cross-functional teams to improve platform maturity, reliability, migration readiness, and delivery efficiency.
- Act as a dependable technical contributor who can independently drive workstreams, resolve issues proactively, and escalate risks appropriately.
Required Technical Skills:
AWS Cloud Services
- Strong hands-on experience with VPC, NAT Gateway, Transit Gateway, Route Tables, Route 53, Route 53 Resolvers, ACM, CloudFront, API Gateway, Athena, ECS, Lambda, Step Functions, and AWS Glue.
Migration Experience
- Proven experience in planning and executing infrastructure and platform migrations, including:
- AWS tenant migration from one AWS Organization to another
- Observability migration from Splunk to Google Observability and Google SecOps
- Network and security change execution involving Route 53, certificates, TGW, DNS, Zscaler, and WAF
- SCP policy changes in controlled enterprise environments
Networking
- Strong understanding of DNS, routing, load balancing, SSL/TLS, certificate lifecycle management, network troubleshooting, and hybrid and enterprise network change coordination.
Storage and Data Platforms
- Experience with EBS, RDS, MongoDB, Snowflake, and S3.
Infrastructure as Code
- Strong hands-on experience developing and maintaining Terraform modules.
- Ability to build reusable, compliant, and standardized infrastructure code.
CI/CD and Automation
- Strong experience designing, implementing, and optimizing GitLab CI/CD pipelines.
- Experience integrating testing and deployment controls into automation workflows.
Containerization
- Hands-on expertise in Docker container creation, management, and troubleshooting.
Linux Administration
- Strong capability in Linux administration, configuration, troubleshooting, and performance tuning.
Scripting
- Proficiency in shell scripting for automation, task orchestration, and operational efficiency.
Security and Compliance
- Experience integrating security controls and vulnerability management into engineering processes.
- Experience supporting Google SecOps workflows.
- Understanding of governance controls and access policy management within AWS.
Preferred Experience:
- Experience working in large-scale enterprise AWS environments.
- Experience leading or supporting AWS Organization / tenant migration programs.
- Experience delivering observability transformation initiatives, especially migration from Splunk to Google-native observability and security platforms.
- Experience coordinating DNS, certificate, TGW, Zscaler, WAF, and routing changes in production environments.
- Experience implementing and validating SCP changes within controlled governance frameworks.
- Experience supporting production cutovers, incident management, rollback planning, and post-migration stabilization.
- Experience developing reusable Terraform modules and platform standards.
- Exposure to Kubernetes, Jira, Packer, AWS Bedrock, AWS Agent Core, Core Principles.
The ideal candidate will demonstrate:
- A hands-on approach with the ability to actively execute engineering and migration tasks, not just provide guidance.
- A self-driven and independent working style, with the ability to manage priorities, drive workstreams, and deliver results with minimal supervision.
- Proven experience supporting complex enterprise migrations involving infrastructure, observability, network, and governance changes.
- Strong troubleshooting capability across AWS, networking, Linux, CI/CD, and containerized environments.
- Strong ownership mindset, accountability, and attention to detail.
- Excellent communication and documentation skills, including the ability to work effectively with engineering, network, security, and governance stakeholders.
- A strong commitment to security, operational excellence, resilience, and cost efficiency.
Candidates are expected to uphold and promote the following principles:
- Hands-On Ownership: Take direct responsibility for implementation, troubleshooting, migration execution, and operational outcomes.
- Self-Driven Delivery: Operate independently, manage priorities effectively, and proactively drive tasks to completion.
- Security by Design: Incorporate security controls from the earliest stages of infrastructure, migration, and application design.
- Shift Left: Introduce validation, testing, and security scanning early in the delivery lifecycle.
- Operational Excellence: Build reliable, supportable, and well-documented solutions that meet enterprise production standards.
- Cost Optimization: Continuously evaluate and implement ways to reduce cloud and operational costs without compromising service quality.
- Code Standardization: Maintain consistent standards across infrastructure code, automation scripts, and configuration management.
- Reusable Design Patterns: Apply scalable, supportable, and repeatable design patterns across infrastructure and delivery pipelines.
- DRY (Don’t Repeat Yourself): Promote modularity and reuse to reduce duplication across scripts, templates, and infrastructure components.