BusPatrol
From BusPatrol's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
Overview We’re hiring a DevOps Engineer to build and secure cloud platforms with Infrastructure-as-Code (Terraform & AWS CDK), GitOps, and multi‑account AWS.
Overview
We’re hiring a DevOps Engineer to build and secure cloud platforms with Infrastructure-as-Code (Terraform & AWS CDK), GitOps, and multi‑account AWS. You’ll modernize legacy monoliths and accelerate microservices delivery while embedding security-by-default and reliability into everything we ship.
IaC at scale: Design, build, and maintain reusable Terraform modules and CDK constructs for landing zones, VPC/networking, compute, databases, and security controls across multiple accounts/environments.
GitOps enablement: Implement and operate Github Actions for app and platform workloads; declarative config, drift detection, and progressive delivery (canary/blue‑green).
Cloud security & compliance: Enforce least‑privilege IAM, KMS encryption, Secrets Manager/Parameter Store, GuardDuty/Security Hub, CloudTrail/Lake; contribute to SOC 2/ISO27001/CIS hardening and policy‑as‑code.
Multi‑account architecture: Evolve AWS Organizations/Control Tower/SCPs, cross‑account roles, and shared services (observability, CI/CD, artifact registries, networking) with clear blast‑radius boundaries.
Modernization: Partner with teams to decompose monoliths via the strangler‑fig pattern, carve‑outs, and data migration strategies; define microservice standards (contracts, observability, release patterns).
CI/CD & reliability: Own build/test/release pipelines (GitHub Actions) quality gates, artifact/version promotion, rollbacks;
Observability & ops: Standardize metrics/logs/traces with CloudWatch/Datadog codify dashboards, alerts, and runbooks. Drive cost visibility and guardrails.
Developer experience: Ship self‑service templates, Backstage scaffolds/golden paths, and documentation that make the paved road the easiest road.
5+ years in DevOps/Platform/SRE roles operating production systems.
Advanced Terraform and/or AWS CDK (TypeScript/Python); authored reusable modules/constructs and remote state strategies.
AWS depth: VPC design (subnets, routing, NAT, TGW), ALB/NLB, ECS/EKS/Lambda, RDS/Aurora, S3, CloudFront, Route 53, IAM, KMS; experience with Control Tower/Organizations/SCPs.
Containers & GitOps: Docker image build/hardening, Kubernetes and/or ECS operations.
Security‑first mindset: Secrets management, encryption, vulnerability scanning, image signing/SBOMs, Policy-as‑Code;
CI/CD & testing: Pipelines with unit/integration/e2e gates, environment promotion, and rollback strategies.
Operations: On‑call participation, incident management, and post‑incident improvement.
Nice to Haves
Backstage or internal developer platform (IDP) experience; golden‑path templates.
Network security (WAF, Zero‑Trust), data security (PII tokenization/DLP), or compliance program experience.
Additional policy‑as‑code tools: AWS Config conformance packs, CloudFormation Guard, tfsec/Checkov, Snyk.
Cost management: CUR/Cost Explorer, anomaly detection, unit economics/chargeback, Savings Plans/RI strategy.
Certifications: AWS DevOps/Solutions Architect, HashiCorp Terraform Associate, Kubernetes CKA/CKAD.
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in