Cloud DevOps Engineer

We are RiPSIM Technologies, and we are hiring a Cloud DevOps Engineer to help build, run, and secure the AWS infrastructure that powers our regulated services platform. This is a hands-on individual contributor role on a small, fast-moving team where each persons work has clear and meaningful impact. The position blends infrastructure engineering with security operations, offering broad ownership and the chance to shape cloud security practices as we grow. We offer a full-time role with benefits that include 401(k), 401(k) matching, dental, health, life, and vision insurance, paid time off, and a flexible schedule. The role is hybrid remote based in Ashburn, Virginia.

- We are looking for 4 to 7 years of operational cloud engineering experience, including at least 2 recent years in AWS production environments.
- We need hands-on experience developing and maintaining Terraform modules across cloud platforms.
- We value experience with Kubernetes and/or ECS, including deployment management, security hardening, and troubleshooting.
- We expect solid familiarity with AWS networking and perimeter controls, such as VPCs, security groups, NACLs, and route tables.
- We require a strong security mindset, including IAM governance, encryption in transit and at rest, certificate lifecycle management, security automation, vulnerability handling, and CI/CD pipeline protection.
- We want practical experience contributing to security and compliance efforts, including documentation, control implementation, and audit evidence preparation.
- We need proficiency in Python and Bash scripting.
- We require U.S. citizenship.
- We prefer candidates with startup or midsize company experience, where broad responsibility and flexibility are important.
- We value prior work designing security controls in regulated environments.
- We prefer experience with cryptographic key management and PKI design.
- We look for background in network and firewall architecture, including AWS security groups, NACLs, VPC design, and segmentation.
- We appreciate experience with managed messaging platforms such as Amazon MQ, Kafka, or similar technologies.
- We prefer experience with secure managed databases such as RDS or Aurora.
- We value experience building log analysis and observability pipelines using tools such as Elasticsearch, Kibana, Graylog, or Splunk.
- We prefer hands-on remediation experience for audit findings, vulnerability scan results, and corrective action tracking.
- We value experience collecting, organizing, and presenting audit evidence for compliance reviews and external auditors.
- We prefer experience in telecommunications, financial services, healthcare, or government environments.
- We look for familiarity with compliance standards such as ISO 27001, SOC 2, or NIST 800-53.
- Active or recent federal clearance is a plus.
- We encourage ongoing professional development through certifications, advanced training, or continued education in cloud security.

- We design, deploy, and maintain Terraform modules across our AWS organization.
- We build and support serverless automation with AWS Lambda for security operations, monitoring, and compliance reporting.
- We operate and secure Kubernetes workloads, including deployment troubleshooting and cluster hardening.
- We strengthen CI/CD pipeline security by integrating IaC scanning, SAST/DAST checks, and policy enforcement.
- We manage cloud security tooling for monitoring, threat detection, vulnerability management, incident response, and log analysis.
- We investigate and resolve security issues, including vulnerabilities, configuration drift, and audit-identified gaps.
- We review IAM policies, access permissions, and baseline configurations across our AWS environment.
- We perform recurring compliance tasks such as firewall reviews, certificate audits, vulnerability scans, and change documentation.
- We create and maintain security documentation, including policies, procedures, standard operating procedures, and audit evidence.
- We collaborate with cloud operations, security operations, and application support teams on cross-functional work.
- We contribute to architecture decisions and expand ownership of cloud security operations over time.