Senior DevSecOps Engineer –Logistics Platform (AWS,SQL)

We are looking for an experienced and versatile Senior DevSecOps Engineer to design,implement, and secure our cloud infrastructure and deployment pipelines across logistics technology platforms (WMS, TMS, OMS, and eCommerce integrations).This role combines expertise in DevOps practices, cloud architecture, and application security (DevSecOps). You will ensure reliability, scalability, and compliance of production systems while maintaining security best practices across CI/CD, infrastructure, and application layers.The ideal candidate has a strong AWS background, a solid understanding of container orchestration, and a security-first mindset.Key Responsibilities1. Infrastructure Management● Architect, deploy, and maintain highly available, scalable, and secure AWS environments for logistics SaaS applications.● Implement Infrastructure as Code (IaC) using tools like AWS CloudFormation,Terraform, or CDK.● Manage and optimize VPCs, subnets, security groups, EC2, S3, RDS (PostgreSQL),and ElasticSearch clusters.● Design multi-environment infrastructure (dev, staging, prod) with proper isolation,monitoring, and cost optimization. 2. CI/CD and Automation● Build and maintain CI/CD pipelines for application and infrastructure deployments using tools like Jenkins, GitHub Actions, CircleCI, or AWS CodePipeline.● Standardize deployment processes across backend, frontend, and microservices.● Integrate testing and security validation into pipelines (static code analysis, dependency scanning, secret detection).● Ensure zero-downtime deployments and support frequent release cycles in agile development environments. 3. Containerization and Orchestration● Design and manage containerized applications using Docker, Kubernetes, AWS ECS, and EKS.● Set up autoscaling policies, resource quotas, and health checks for high availability.● Manage container image scanning and secure image registries. 4. Monitoring, Logging & Observability● Implement and maintain monitoring systems (Prometheus, Grafana, CloudWatch, Telegraf, InfluxDB).● Configure centralized logging (Elastic Stack/EFK, Graylog, Loki) and APM tools (New Relic, Datadog, or Sentry).● Establish alerting rules for system health, latency, and security events.● Provide actionable visibility into production performance and reliability metrics.5. Security● Integrate security practices into DevOps pipelines.● Conduct regular vulnerability assessments and patch management across environments.● Implement identity and access management (IAM) best practices — least privilege, role-based access, MFA enforcement.● Ensure compliance with security frameworks (OWASP, ISO 27001, SOC 2).● Protect data integrity and privacy for sensitive logistics and customer data.● Support incident response and post-mortem analysis.6. Cost Management & Optimization● Continuously monitor and analyze AWS usage, identifying opportunities for cost reduction and efficiency gains.● Implement autoscaling, rightsizing, and lifecycle policies for EC2, RDS, S3, and Kubernetes clusters.● Use AWS Cost Explorer, Budgets, and CloudWatch Metrics to track and forecast spend.● Define and enforce tagging strategies for cost visibility by environment, team, or project.● Optimize data storage and retention across logs, snapshots, and backups to reduce overhead.● Collaborate with engineering and product teams to balance cost vs performance trade-offs.● Produce monthly cost reports and recommendations for leadership on optimization Initiatives.7. Database and Application Performance● Maintain and tune PostgreSQL, Redis, Elasticsearch, or NoSQL databases for optimal performance.● Perform query optimization, index tuning, and replication configuration for scalability and resilience.● Support developers in analyzing query performance and troubleshooting production Bottlenecks.8. Collaboration and Mentorship● Work closely with Developers, QA/QC teams, and Product Managers to improve system reliability.● Mentor junior DevOps engineers on AWS, Kubernetes, and CI/CD best practices.● Participate in sprint planning, release readiness reviews, and production deployment planning.