Overview
We’re hiring a DevOps Engineer to build and secure cloud platforms with Infrastructure-as-Code (Terraform & AWS CDK), GitOps, and multi‑account AWS. You’ll modernize legacy monoliths and accelerate microservices delivery while embedding security-by-default and reliability into everything we ship.
Key Responsibilities
· IaC at scale: Design, build, and maintain reusable Terraform modules and CDK constructs for landing zones, VPC/networking, compute, databases, and security controls across multiple accounts/environments.
· GitOps enablement: Implement and operate Github Actions for app and platform workloads; declarative config, drift detection, and progressive delivery (canary/blue‑green).
· Cloud security & compliance: Enforce least‑privilege IAM, KMS encryption, Secrets Manager/Parameter Store, GuardDuty/Security Hub, CloudTrail/Lake; contribute to SOC 2/ISO27001/CIS hardening and policy‑as‑code.
· Multi‑account architecture: Evolve AWS Organizations/Control Tower/SCPs, cross‑account roles, and shared services (observability, CI/CD, artifact registries, networking) with clear blast‑radius boundaries.
· Modernization: Partner with teams to decompose monoliths via the strangler‑fig pattern, carve‑outs, and data migration strategies; define microservice standards (contracts, observability, release patterns).
· CI/CD & reliability: Own build/test/release pipelines (GitHub Actions) quality gates, artifact/version promotion, rollbacks;
· Observability & ops: Standardize metrics/logs/traces with CloudWatch/Datadog codify dashboards, alerts, and runbooks. Drive cost visibility and guardrails.
· Developer experience: Ship self‑service templates, Backstage scaffolds/golden paths, and documentation that make the paved road the easiest road.
Preferred Qualifications
· 5+ years in DevOps/Platform/SRE roles operating production systems.
· Advanced Terraform and/or AWS CDK (TypeScript/Python); authored reusable modules/constructs and remote state strategies.
· AWS depth: VPC design (subnets, routing, NAT, TGW), ALB/NLB, ECS/EKS/Lambda, RDS/Aurora, S3, CloudFront, Route 53, IAM, KMS; experience with Control Tower/Organizations/SCPs.
· Containers & GitOps: Docker image build/hardening, Kubernetes and/or ECS operations.
· Security‑first mindset: Secrets management, encryption, vulnerability scanning, image signing/SBOMs, Policy-as‑Code;
· CI/CD & testing: Pipelines with unit/integration/e2e gates, environment promotion, and rollback strategies.
· Operations: On‑call participation, incident management, and post‑incident improvement.
Nice to Haves
· Backstage or internal developer platform (IDP) experience; golden‑path templates.
· Network security (WAF, Zero‑Trust), data security (PII tokenization/DLP), or compliance program experience.
· Additional policy‑as‑code tools: AWS Config conformance packs, CloudFormation Guard, tfsec/Checkov, Snyk.
· Cost management: CUR/Cost Explorer, anomaly detection, unit economics/chargeback, Savings Plans/RI strategy.
· Certifications: AWS DevOps/Solutions Architect, HashiCorp Terraform Associate, Kubernetes CKA/CKAD.
Skills Required
- 5+ years of experience in DevOps, platform engineering, or SRE roles operating production systems
- Advanced Terraform and/or AWS CDK experience, including reusable modules or constructs and remote state strategies
- Advanced AWS experience with VPC design, networking, compute, databases, storage, content delivery, DNS, IAM, KMS, and AWS Organizations or Control Tower
- Experience operating Docker containers and Kubernetes and/or ECS
- Experience with secrets management, encryption, vulnerability scanning, image signing, SBOMs, and policy-as-code
- Experience building CI/CD pipelines with unit, integration, and end-to-end testing gates, environment promotion, and rollback strategies
- On-call participation, incident management, and post-incident improvement experience
- Backstage or internal developer platform experience
- Experience with network security, data security, or compliance programs
- Experience with AWS Config conformance packs, CloudFormation Guard, tfsec, Checkov, or Snyk
- Cost management experience, including Cost and Usage Reports, Cost Explorer, anomaly detection, chargeback, Savings Plans, or Reserved Instance strategy
- AWS DevOps or Solutions Architect, HashiCorp Terraform Associate, or Kubernetes CKA/CKAD certification
What We Do
BusPatrol is a safety technology company with the mission of making the journey to and from school safer for children everywhere. BusPatrol’s School Bus Safety Program changes driver behavior and creates a culture of awareness and responsibility around school buses. In addition, it provides accessibility for school districts, cities and counties to modernize their entire school bus fleets by outfitting them with the latest stop-arm, route planning and route execution technology.
