Lead Devops Engineer

About the Role

Join Codem Inc. as a Lead DevOps Engineer - AWS. You will own and evolve our cloud infrastructure on Amazon Web Services (AWS), working closely with engineering teams to design, build, and operate scalable, secure, and cost-effective environments.

This is an immediate joiner role focused on containerized workloads, CI/CD pipelines, networking, security, and observability. GCP exposure is a strong plus as we evaluate multi-cloud strategies.

Key Responsibilities

• Infrastructure: Design, provision, and maintain AWS infrastructure using Terraform (modules, environments, remote state).
• ECS Fargate: Own workloads end-to-end: task definitions, service deployments, autoscaling, health checks, and rollback strategies.
• Container Pipelines: Manage image pipelines via ECR, multi-stage Dockerfiles, scanning, and vulnerability management.
• CI/CD: Build/maintain pipelines using GitHub Actions and Jenkins; migrate legacy tooling to modern workflows with OIDC federation (no static credentials).
• Security & IAM: Enforce best practices including least-privilege roles, KMS key management, TLS termination, proxy trust configuration, and secure cookie handling.
• Networking: Design/manage VPCs (subnets, SGs), ALB/NLB, CloudFront, Route 53, and VPN connectivity (Client/Site-to-Site).
• Secrets Management: Securely integrate AWS Secrets Manager with ECS task definitions.
• Observability: Set up/maintain CloudWatch Logs, metrics, dashboards, and alerting.

Mentorship

Grow your team by mentoring junior engineers and establishing DevOps standards across the organization.

Required Skills & Experience

• Experience: 6–8 years in DevOps/infrastructure, with at least 4 hands-on AWS years.
• AWS Core Services: Deep expertise in ECS Fargate, ECR, ALB/NLB, VPC, IAM, Secrets Manager, KMS, S3, CloudFront, Route 53, CloudWatch.
• Terraform: Writing reusable modules, multi-environment configurations, state management.
• CI/CD Tools: Strong GitHub Actions (workflows, OIDC, matrix builds) and Jenkins administration/migration experience.
• Docker Containers: Multi-stage builds, minimal runtime images, security hardening.
• AWS Networking: VPC design trade-offs (NLB vs ALB), VPN configurations.

Nice to Have

• GCP experience (Cloud Run, GKE, Cloud Build).
• gRPC infrastructure exposure.
• ElastiCache or Aurora PostgreSQL on AWS.
• AWS Certifications (Solutions Architect, DevOps Professional).

What We Offer

- Ownership of cloud infrastructure across dev, staging, and production.
- Collaborative, engineering-led team culture.
- Competitive compensation package.