DevOps Engineer – AWS & Infrastructure as Code

We are looking for a DevOps Engineer with solid experience in AWS, strong coding skills in Python or TypeScript, and a proven track record in building infrastructure using Infrastructure as Code (IaC). You’ll play a key role in designing, implementing, and maintaining scalable, secure, and reliable cloud environments using Pulumi.

Key Responsibilities
Comfortable working in a collaborative, team-oriented environment
Design and manage AWS infrastructure using Pulumi (or similar IaC tools), with a focus on scalability, maintainability, and automation.
Write and maintain high-quality infrastructure and DevOps tooling code in Python or TypeScript.
Collaborate with engineering teams to support CI/CD pipelines, release workflows, and environment management.
Ensure infrastructure follows best practices for security, monitoring, cost efficiency, and disaster recovery.
Perform root cause analysis and debugging for complex production issues across AWS infrastructure and application layers.
Drive improvements in DevOps practices, documentation, and team workflows.
Requirements
5+ years of experience in a DevOps, Cloud Engineering, or Infrastructure role, with demonstrated success managing and scaling production-grade systems on cloud platforms.
Proven hands-on coding experience in Python or TypeScript, particularly in the context of infrastructure automation, cloud tooling, or platform engineering.
Experience with Docker and/or Kubernetes.
Solid experience with Pulumi (preferred) or equivalent IaC tools such as Terraform or CloudFormation, with a strong willingness to work primarily with Pulumi.
Practical experience designing, deploying, and managing AWS Landing Zones, including multi-account strategies, security baselines, centralized logging, and governance models.
Strong knowledge of CI/CD pipelines and automation workflows using tools such as GitHub Actions, GitLab CI, CircleCI, or similar.
Deep understanding of core AWS services, including EC2, ECS, Lambda, VPC, IAM, RDS, CloudFront, S3, and Route 53.
Experience with networking fundamentals in AWS: VPC design, subnets, routing tables, NAT gateways, security groups, NACLs etc.
Strong grasp of IAM and security best practices: role and policy design, secrets management, least privilege enforcement, and cloud identity governance.
Familiarity with observability tools (e.g., CloudWatch, Datadog, Prometheus, Grafana) for monitoring, logging, and incident response.
Comfortable working in a fast-paced, collaborative team environment, with a high level of ownership, accountability, and adaptability.
Nice to Have
Familiarity with serverless architectures, microservices, or event-driven systems.
Exposure to compliance frameworks (e.g., SOC2, ISO27001, etc.) and cloud governance.
Experience with security and DevSecOps tools, such as Snyk, AWS Inspector, AWS GuardDuty, or Prisma Cloud.
Familiarity with cost optimization strategies and tools for AWS resource usage.
Location & Work Model
Full-time position, with a requirement to work from the office at least 3 days per week.
Location: Israel, Herzliya
tN0UF3lWD9