Senior DevOps Engineer

Infrastructure Evolution: Maintain, optimize, and evolve our entire AWS infrastructure using AWS CDK (TypeScript). Live Ops & Scaling: Manage ECS clusters and automated scaling policies to flawlessly handle sudden traffic spikes during draw windows. Database & Data Operations: Oversee RDS PostgreSQL, Redis, and RabbitMQ operations, including scheduled scaling, automated backups, performance tuning, and connection pooling management. CI/CD & Deployments: Evolve and improve GitHub Actions deployment workflows, ensuring zero-downtime rolling updates. Security & Governance: Enforce least-privilege IAM roles, manage secure secret injection (Secrets Manager/SSM), maintain WAF rules and ensure encryption at rest/transit. Observability: Design and monitor CloudWatch dashboards, fine-tune alert thresholds (CPU, memory, storage, DB connections) and conduct root-cause analysis (RCA) for any production deviations. Incident Diagnosis: Quickly and accurately identify production issues — correlate logs, metrics and infrastructure state to pinpoint root causes under pressure. AI-Driven Efficiency: Evaluate, implement and leverage modern AI tools and solutions to optimize DevOps workflows, accelerate troubleshooting and automate routine infrastructure management tasks. Strategic Roadmap: Look beyond day-to-day tickets to identify structural risks, cost optimization opportunities and plan migration paths or architectural improvements Compute & Orchestration: ECS (EC2 launch type), Auto-Scaling Groups, Capacity Providers, Task Definitions,and ECR. Databases & Caching: RDS PostgreSQL (Multi-AZ with scheduled Lambda-based scaling), ElastiCache (Redis multi-node replication clusters). Messaging: Amazon MQ (RabbitMQ multi-AZ clusters). Networking & Content Delivery: VPC (multi-AZ, NAT Gateways, Interface Endpoints), VPC Peering (cross-region IL ↔ EU), ALB (sticky sessions, health checks), Route53 (hosted zones, ALIAS records), and CloudFront. Security & Governance: WAF, Lambda, ACM, Cognito, Secrets Manager, SSM Parameter Store, IAM, and SNS. Observability: CloudWatch (Dashboards, Alarms, Log Insights), and ECS Container Insights. Infrastructure as Code (IaC) AWS CDK (TypeScript): Proficiency in writing, refactoring and deploying infrastructure via CDK. CloudFormation Fundamentals: Deep understanding of stack lifecycles, drift detection, updates and rollbacks. Tooling & Concepts CI/CD: GitHub Actions (building, tagging, ECR push and task definition updates for zero-downtime rollouts). Containers: Advanced Docker optimization, container networking and troubleshooting host-level resource allocation. Linux Networking & DNS: Host-level DNS resolution optimization (e.g. dnsmasq on EC2) and troubleshooting transient network errors like EAI_AGAIN.