Role Summary - US-based required, Denver-based preferred
The DevSecOps Engineer supports, secures, automates, and optimizes AWS cloud infrastructure across internal systems, client implementations, and production environments. The role combines DevOps engineering with security operations, focusing on infrastructure reliability, observability, deployment support, security visibility, and cost optimization.
A primary responsibility is owning infrastructure monitoring and alerting across supported environments - maintaining visibility into system health, improving alert quality, responding to incidents, and ensuring teams have the observability needed for reliable operations. The engineer also serves as a technical escalation point for infrastructure, deployment, and security issues, working cross-functionally with implementation, engineering, support, and leadership teams.
Core Responsibilities
Infrastructure Monitoring & Alerting (Primary Ownership)
- Own end-to-end monitoring and alerting across supported AWS environments using Prometheus, Grafana, CloudWatch, and related tools.
- Configure, tune, and maintain alerts to reduce noise, close coverage gaps, and keep notifications actionable.
- Investigate and respond to infrastructure alerts, performance issues, and availability concerns.
- Maintain dashboards and observability views used by internal teams to assess environment health.
- Support incident investigation and root cause analysis using monitoring data, logs, and metrics.
- Define monitoring standards and alerting expectations across client and internal environments.
DevOps & Cloud Infrastructure
- Support AWS infrastructure across client, internal, and production environments.
- Build, configure, and validate dedicated cloud resources for client implementation and onboarding.
- Provide L1/L2 escalation support for infrastructure, deployment, and environment issues.
- Support CI/CD workflows, deployment automation, and repeatable operational processes.
- Drive reliability, scalability, and operational consistency improvements.
- Lead AWS cost management efforts including resource cleanup, right-sizing, and usage optimization.
- Maintain runbooks, documentation, and operational procedures for recurring workflows.
Security Operations / DevSecOps
- Monitor SIEM and security tooling; triage, investigate, and escalate security events.
- Review infrastructure and deployment configurations for security risks.
- Apply least-privilege principles to IAM, access control, and cloud resource configuration.
- Support vulnerability remediation and risk reduction efforts.
- Ensure logging, monitoring, and alerting cover security-relevant activity.
- Collaborate with engineering, implementation, and support teams on security findings and secure deployment practices.
Level Expectations
This role operates with independent ownership and technical judgment, particularly across monitoring, alerting, troubleshooting, and operational visibility. The engineer is expected to:
- Independently investigate and resolve complex infrastructure, deployment, and monitoring issues.
- Make technical decisions that balance reliability, security, cost, and operational impact.
- Support multiple client and internal environments with minimal supervision.
- Act as a technical escalation point across infrastructure and security domains.
- Identify risks, gaps, and monitoring blind spots before they become operational issues.
- Improve systems through automation, documentation, and process refinement.
Qualifications
Required
- Hands-on experience supporting AWS cloud infrastructure in production or client-facing environments.
- Demonstrated experience with DevOps operations, deployment support, monitoring, and troubleshooting.
- Experience with observability tools such as Prometheus, Grafana, CloudWatch, or equivalent platforms.
- Experience with security monitoring, SIEM review, vulnerability remediation, or secure cloud configuration.
- Working knowledge of core AWS services, IAM, networking, and least-privilege practices.
- Ability to troubleshoot across infrastructure, applications, deployments, and security tooling.
- Strong written and verbal communication skills, with the ability to document issues and explain technical findings to cross-functional audiences.
Preferred
- CI/CD pipelines and deployment automation.
- Infrastructure-as-code (Terraform, CloudFormation, or AWS CDK).
- Containerized workloads (Docker, ECS, Kubernetes).
- AWS security services (GuardDuty, Security Hub, IAM Access Analyzer, AWS Config, CloudTrail, WAF, Inspector).
- Vulnerability scanning, SIEM workflows, and alert triage.
- Multi-client, single-tenant, or dedicated client cloud environments.
- AWS cost optimization and resource right-sizing.
- Operational documentation, runbooks, and automation scripting.
Preferred Certifications
- AWS Certified Solutions Architect
- AWS Certified SysOps Administrator
- AWS Certified Developer
- AWS Certified Security - Specialty
- AWS Certified DevOps Engineer - Professional
- CompTIA Security+
- CompTIA Network+
Success Criteria
Success is measured by improvements in infrastructure visibility, alerting effectiveness, operational reliability, security posture, and cloud cost efficiency. Key outcomes include:
- Strong ownership of monitoring and alerting across supported environments.
- Higher alert quality, reduced noise, better coverage, faster actionability.
- Faster detection, investigation, and escalation of infrastructure and security issues.
- Improved reliability and consistency of client and internal deployments.
- Stronger security visibility through SIEM monitoring and secure configuration practices.
- Measurable reduction in AWS infrastructure costs through optimization efforts.
- Increased automation and documentation supporting repeatable operations.
- Effective cross-functional support to implementation, engineering, and support teams.
If we still have your attention, don't delay, send us your resume.
The pay range for this position in Colorado is $X95,000 - $110,000 (yr base pay); however, base pay offered may vary depending on job-related knowledge, skills, and experience. This information is provided per the Colorado Equal Pay Act. Base (CEPA) pay information is based on market location.
