DPL - Senior DevOps Engineer (AWS)

DevOps Developer is needed in Islamabad, Pakistan.

Client: DPL

Location: Islamabad, IS, pk

Contract: Freelance

Job Description

We are seeking a Senior DevOps Engineer to own and improve the AWS platform supporting our .NET and React products. The role covers infrastructure as code, deployments, security, observability, reliability, governance and cost management across development, QA, staging and production environments.

You will work closely with frontend, backend, QA and infrastructure teams to establish scalable, secure and reliable ways of building, deploying and operating applications. You will also mentor engineers, improve self-service capabilities and lead platform standards and practices.

Key responsibilities include:

• Design and maintain AWS environments across multiple accounts, including VPCs, subnets, NAT, Transit Gateway, Route 53 and related networking components.
• Operate containerised .NET workloads on ECS using Fargate and EC2, with ALB and API Gateway.
• Support serverless services including Lambda, SQS, SNS, EventBridge, Step Functions and DynamoDB.
• Manage Aurora MySQL, including backups, parameter groups, read replicas, failover and Global Database where required.
• Contribute to multi-region and active-active architectures, including replication, routing and failover testing.
• Define infrastructure using Terraform or AWS CDK, including reusable modules, secure state management and infrastructure code reviews.
• Build and maintain CI/CD pipelines for .NET APIs, React applications and Lambda functions using GitHub Actions, Azure DevOps or AWS CodePipeline.
• Implement blue/green and canary deployments, automated rollbacks, database migration processes and quality gates such as testing and security scanning.
• Establish logging, monitoring, tracing and alerting using CloudWatch, X-Ray and OpenTelemetry.
• Define service-level objectives, lead incident response and facilitate blameless post-mortems.
• Own backup, disaster recovery and RTO/RPO testing.
• Manage AWS security controls, including IAM, Organizations, SCPs, SSO/Identity Center, Secrets Manager, Parameter Store, KMS, WAF, Shield, GuardDuty, Security Hub and AWS Config.
• Support Cognito authentication configuration and environment hardening.
• Monitor and optimise AWS costs through tagging, rightsizing, Savings Plans, budgets and anomaly alerts.
• Report cost, reliability and platform performance metrics to engineering management.
• Mentor developers and junior DevOps engineers, and create clear runbooks and platform documentation.
• Partner with engineering teams to enable self-service environments and deployments.

Requirements

• At least five years of experience in DevOps, SRE or cloud infrastructure roles, including three or more years managing production workloads on AWS.
• Extensive hands-on experience with ECS, ALB, API Gateway, Lambda, SQS, DynamoDB, RDS/Aurora MySQL, Cognito, CloudWatch, IAM and VPC networking.
• Strong Terraform or AWS CDK experience, including reusable module design and remote state management.
• Strong Docker knowledge, including multi-stage builds, image optimisation, ECR and image scanning.
• Experience building and owning CI/CD pipelines for .NET, Node.js/React or serverless applications.
• Proficiency in Bash and at least one of Python, PowerShell or C#.
• Strong Linux administration and networking fundamentals, including DNS, TLS, load balancing, routing and security groups.
• Production on-call experience, including incident management, root cause analysis and post-mortems.
• Working knowledge of AWS security services and least-privilege IAM design.
• Experience with Git workflows, pull-request reviews and branch protection.
• A bachelor’s degree in Computer Science or a related field, or equivalent professional experience.

Technology Environment

The platform uses .NET services, React applications and AWS services including ECS, Fargate, EC2, ALB, API Gateway, Lambda, SQS, SNS, EventBridge, Step Functions, DynamoDB, Aurora MySQL, Cognito, CloudWatch, X-Ray, OpenTelemetry, IAM, KMS, WAF, GuardDuty, Security Hub and AWS Config.

Experience with Grafana or Datadog is advantageous.