AWS DevOps Engineer

- Design, provision, and manage AWS infrastructure employing Infrastructure as Code (Terraform) - Oversee and scale Kubernetes clusters on EKS across various environments including development, QA, user acceptance testing, production, and disaster recovery, along with authoring and maintaining Helm charts, RBAC, namespaces, HPA, KEDA for event-driven autoscaling, and cluster upgrades - Ensure high availability and disaster recovery across a multi-region AWS setup, including a dedicated cross-region disaster recovery cluster, cross-region S3 replication, and managing PostgreSQL databases; optimize costs including reserved instances - Lead the monitoring, alerting, and observability stacks (Prometheus, Grafana, Loki, Promtail, CloudWatch) and customize alerts using AWS Lambda - Manage secrets and credentials via AWS Secrets Manager, establish IAM least-privilege policies, and utilize External Secrets Operator for Kubernetes secret synchronization - Maintain an internal Helm chart registry (ChartMuseum) with necessary primary and disaster recovery instances - Construct and preserve custom AMI images for bastion and infrastructure hosts using Packer and NixOS, incorporating Tailscale-based zero-trust network access - Govern the GitOps deployment platform (ArgoCD) across all clusters, managing application manifests, sync policies, RBAC, and onboarding for clusters - Sustain GitHub Actions pipelines for workflows involving building, testing, and security scanning (Docker image builds, Infrastructure as Code scanning, Rust/Python Lambda CI) - Administer GitHub organization settings, team permissions, branch protection regulations, and perform audit logging - Develop and maintain reusable GitHub Actions workflows for use across multiple engineering teams - Enforce deployment validation through Infrastructure as Code security scanning and promote modifications through environments via GitOps pull-request workflows - Integrate and maintain AI-assisted development tooling (Claude Code) within CI/CD processes and development workflows, including managing API credentials, usage monitoring, and implementing secure permission boundaries for automated contexts