Senior DevOps Engineer (AWS)

ABOUT THE ROLE

In this role, you will own the AWS foundation for a malware analysis platform that runs its analysis workloads on virtual machines. You will lead the technical discovery, build the isolated sandbox environment, and work out how a mature appliance-based security product moves to AWS without losing the compatibility its customers depend on. The evidence you produce will shape the target architecture.

RESPONSIBILITIES

• Design and run virtual-machine workloads that create, distribute, and update malware definitions across ephemeral EC2 instances
• Own the definition lifecycle end-to-end - storage, propagation, readiness gating, and rollback to a known-good set - so analysis nodes stay accurate as the platform scales
• Partner with the client's architects, engineers, and product stakeholders to turn open design questions into evidenced recommendations
• Build the isolated sandbox in Terraform, covering dedicated VPC boundaries, controlled egress, private access paths, and single-use analysis hosts
• Automate the full EC2 lifecycle using Auto Scaling Groups, AMI image-building pipelines, and Lambda lifecycle hooks
• Secure the environment through VPC isolation, security groups, IAM roles, and AWS Secrets Manager
• Benchmark Aurora PostgreSQL, ElastiCache, and Amazon OpenSearch Service against the existing appliance on compatibility, performance, and running cost
• Prove cross-region replication, instance replacement, and recovery, and document the operational procedures behind them

REQUIREMENTS

• 5+ years of hands-on AWS infrastructure experience, with depth in EC2, VPC networking, IAM, and storage services
• Proven experience with virtual-machine workloads in isolated or security-sensitive environments, such as malware analysis, sandboxing, or detonation platforms
• Strong Terraform skills, applied to infrastructure that stayed maintainable after handover
• Advanced EC2 lifecycle knowledge across Auto Scaling Groups, AMI pipelines, instance replacement, patching, and Lambda lifecycle hooks
• Practical experience with Aurora PostgreSQL, and the judgement to weigh managed services such as ElastiCache and OpenSearch against cost and compatibility
• Working knowledge of cross-region replication and of integrating AWS services with legacy or appliance-based systems
• Fluent English, with the ability to present technical findings and cost evidence to client stakeholders
• Collaborative approach, comfortable shaping decisions jointly with an established architecture team