Infrastructure & Cloud Architecture
• Design, implement, and maintain scalable, secure, and highly available infrastructure on AWS (VPC, EC2, ECS/EKS, RDS, S3, Lambda, IAM, CloudFront, Route53, etc.)
• Own the infrastructure-as-code strategy using Terraform, including module design, state management, and multi-environment provisioning
• Drive cost optimization, security hardening, and architectural best practices across all environments (dev, staging, production) • Lead disaster recovery, backup, and business continuity planning for critical systems CI/CD & Automation
• Architect and maintain robust CI/CD pipelines (GitHub Actions preferred) for build, test, and deployment automation across multiple services/teams
• Build automation tooling and scripts using Python and Shell to eliminate manual operational work
• Implement GitOps practices and policy-as-code for infrastructure changes (plan/apply gates, automated compliance checks)
• Own release management processes, deployment strategies (blue-green, canary, rolling), and rollback procedures Source Control & Collaboration
• Manage and enforce GitHub best practices — branching strategy, code review workflows, repo structure, access controls, and GitHub Actions workflows
• Collaborate closely with development, QA, and security teams to embed DevOps practices into the SDLC Reliability & Security
• Set up and maintain monitoring, logging, and alerting (CloudWatch, Prometheus/Grafana, Datadog, or similar)
• Lead incident response and root cause analysis for production issues; drive postmortems and long-term fixes
• Implement and enforce security best practices — IAM least privilege, secrets management, vulnerability scanning, compliance guardrails Leadership & Mentorship
• Lead and mentor a team of DevOps/Infrastructure engineers; conduct code/infra reviews and guide technical decision-making • Define and enforce infrastructure standards (tagging, naming conventions, module reuse, documentation)
• Partner with engineering leadership on infrastructure roadmap, tooling decisions, and capacity planning
• Own vendor/tool evaluations (build vs. buy) for infrastructure and DevOps tooling