Senior AWS DevOps Engineer

Onsite in Milpitas, CA | Profitable, Series C FinTech Startup - AWS, Terraform, Docker, Kubernetes, Active Directory This Jobot Job is hosted by: Sierra Johnson Are you a fit? Easy Apply now by clicking the "Quick Apply" button and sending us your resume. Salary: $155,000 - $165,000 per year A bit about us: We’re a mission-driven fintech company building technology that helps millions of workers access the money they’ve already earned - when they need it most. Our platform integrates with employers and payroll systems to provide real-time wage access and financial wellness tools that reduce reliance on payday loans, overdraft fees, and other costly alternatives. Founded in Silicon Valley, our team is focused on using modern payment infrastructure and scalable cloud platforms to solve real financial challenges for everyday workers. We are seeking a Senior AWS DevOps & Cloud Security Engineer to own and drive the security, production infrastructure, and DevOps automation across our AWS environment. This is a critical role where you will be directly responsible for: Designing and securing cloud infrastructure. Managing production-grade systems at scale. Leading DevOps practices across CI/CD, monitoring, and infrastructure automation. This position is onsite in Milpitas, CA. Why join us? Company sponsored Health, Dental, and Vision insurance Health, Dental and Vision Reimbursement account 401K, traditional, and Roth with a company match Tuition Assistance or Tuition Reimbursement Unlimited Paid Time off Monthly Gym Reimbursement Paid time off to volunteer Paid Family Leave Complimentary office lunches Opportunity to work with a great team committed to making a difference. More! Job Details Responsibilities: Own and maintain the security posture across AWS accounts, environments, and production workloads. Design and operate scalable, highly available, and secure AWS infrastructure. Manage Active Directory integration with AWS IAM, supporting access for EC2, EKS, and applications. Lead DevOps initiatives including CI/CD pipelines, Infrastructure as Code (IaC), version control, and automated deployments. Administer and secure Windows Server and IIS workloads hosted in AWS. Deploy and manage containerized applications using Docker and EKS. Establish and enforce cloud governance and compliance standards (CIS, NIST, HIPAA). Implement monitoring and observability solutions including logging, metrics, alerting, and dashboards. Build automation tools and scripts to streamline operations and improve reliability. Participate in on-call rotations, incident response, and root cause analysis. Optimize cloud environments for performance, availability, and cost efficiency. Required Skills & Qualifications 7 years of experience in DevOps, Infrastructure, or Cloud Engineering roles. Strong AWS expertise across EC2, VPC, IAM, RDS, S3, Systems Manager, KMS, GuardDuty, CloudWatch, Config, CloudTrail, etc. Proven experience in cloud security, including IAM governance, least privilege policies, and secrets management. In-depth experience with Active Directory, including IAM-AD integration and federated authentication. Production experience with Docker (4 years) and Amazon EKS/Kubernetes. Strong scripting skills: PowerShell (primary), Bash, or Python. CI/CD pipeline experience using Azure DevOps (VSTS/TFS), GitHub Actions, or Jenkins. Experience with Infrastructure as Code (IaC) tools like Terraform, CloudFormation, or Pulumi. Hands-on experience with Windows Server IIS, .NET/C# applications, and SQL Server. Proficiency in monitoring and APM tools such as Datadog, Dynatrace, AppDynamics, Site24x7. Solid understanding of networking: DNS, Load Balancing, SSL/TLS, VPC, routing, firewalls. Preferred Qualifications AWS Certifications: DevOps Engineer – Professional, Security – Specialty, or Solutions Architect – Professional. Experience with secrets management tools: AWS Secrets Manager, SSM Parameter Store, or HashiCorp Vault. Familiarity with Zero Trust, SSO, SAML, and OIDC-based authentication models. Knowledge of cost optimization strategies using AWS Cost Explorer, Trusted Advisor, and Savings Plans. Experience working in regulated industries (e.g., healthcare, finance, or government). Interested in hearing more? Easy Apply now by clicking the "Quick Apply" button. Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions. Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance. Information collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Jobot, and/or its agents and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here: jobot.com/privacy-policyaa415a4b-8b21-40fc-a65c-70d2b25ca29a