AWS Cloud / DevOps Engineer (IaC, ECS Fargate & Observability)

We are seeking an AWS Cloud / DevOps Engineer to build and run the platform for an email gateway that runs across multiple availability zones. It sits behind an edge CDN/WAF and uses API Gateway, private networking and containers on ECS Fargate. The engineer will:
•    build the dev, test and prod environments entirely through infrastructure-as-code
•    set up CI/CD pipelines with security scanning, contract tests and staged releases
•    own identity, encryption, secret rotation, monitoring, alerting, and autoscaling sized for peak volumes
The engineer will follow the client's existing platform standards and work with security and network teams on reviews and approvals. The role also leads technical decisions on the DevOps track, mentors engineers, and writes the runbooks the support team will use after go-live.
 

Responsibilities

Infrastructure
•    Provision API Gateway, VPC Link, internal ALB, ECS Fargate, DynamoDB, SQS, EventBridge, AppConfig and S3 using Terraform or AWS CDK
•    Configure Route 53 domains, certificates and edge integration
•    Set up multi-AZ autoscaling and warm capacity for peak traffic
•    Configure VPC endpoints for AWS services and controlled egress to the email provider API
 

CI/CD & Security
•    Build pipelines with SAST, dependency and image scanning, automated tests and staged releases
•    Implement Cognito machine-to-machine authentication, least-privilege IAM, KMS encryption and secret rotation
•    Apply FinOps tagging across all resources
Observability & Operations
•    Build CloudWatch dashboards and alarms for latency, errors and DLQ depth
•    Enable tracing with ADOT/X-Ray and account auditing with CloudTrail
•    Write runbooks for email provider outages, DLQ replay, configuration rollback and credential rotation

Leadership
•    Lead the DevOps workstream and agree platform decisions with client teams
•    Mentor engineers on IaC, pipeline and security best practices
 

Qualifications

Required Skills & Competencies
•    Strong Hands-on AWS cloud/DevOps engineering with ECS Fargate, containerisation, API Gateway, VPC networking, private connectivity, load balancing and DNS/TLS.
•    Infrastructure as code with Terraform or AWS CDK, Git-based reviews and automated environment provisioning.
•    CI/CD for Node.js / TypeScript services, security scanning, controlled releases and rollback.
•    AWS IAM, KMS, Secrets Manager, DynamoDB, SQS/DLQ, configuration management and operational recovery.
•    CloudWatch, CloudTrail and distributed tracing using ADOT/OpenTelemetry or X-Ray; experience implementing actionable alerts and operational dashboards.
•    Hands-on use of AI coding tools for infrastructure or pipeline development with validation, least-privilege review and protection of sensitive configuration.
Good-to-Have
•    Akamai WAF, Cognito M2M, AppConfig and OpenSearch/ELK; retail peak-traffic readiness.
•    AWS DevOps Engineer – Professional or SysOps certification
Qualifications
•    7–10 years of relevant cloud/DevOps engineering experience, including technical ownership of AWS deployments. 
•    B.E./B.Tech/MCA or equivalent
 

About UsAt Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.
Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.
We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.