AWS DevSecOps Engineer

Synechron · Piscataway, New Jersey

FULL TIME$1,10,000 – $1,10,000 / yr

Job Description

We are

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 17000+, and has 58 offices in 22 countries within key global markets.

Our Challenge

We are seeking a senior

AWS DevSecOps Engineer

to design, implement, and manage secure, scalable, and automated cloud development and deployment processes.

The successful candidate will have strong hands-on experience with

GitHub administration, GitHub Actions pipelines, GitHub Advanced Security, AWS CloudFormation, AWS cloud deployments, and secure software development practices . This role will help establish and mature our DevSecOps capabilities by embedding security, automation, and operational excellence throughout the software development lifecycle.

The ideal candidate is technically experienced, security-minded, highly collaborative, and comfortable providing guidance to development, infrastructure, architecture, and security teams.

Additional Information*

The base salary for this position will vary based on geography and other factors.

In accordance with law, the base salary for this role if filled within Piscataway, NJ is $110K-$120K/year & benefits (see below).

Responsibilities

GitHub Administration and Governance

Set up and manage GitHub organizations, repositories, teams, permissions, and access controls.

Establish and maintain repository standards, naming conventions, branching strategies, and protection rules.

Configure pull request requirements, code reviews, approvals, and merge controls.

Manage GitHub environments, secrets, variables, webhooks, integrations, and repository policies.

Support the implementation of GitHub Enterprise governance and best practices.

Develop standards for source control, release management, tagging, and versioning.

Provide technical guidance and support to development teams using GitHub.

GitHub Actions and CI/CD

Design, build, and maintain robust GitHub Actions pipelines for application build, test, security validation, packaging, and deployment.

Create reusable workflows, composite actions, and pipeline templates.

Configure GitHub-hosted and self-hosted runners where appropriate.

Implement automated deployment processes across development, test, staging, and production environments.

Configure environment approvals, deployment gates, promotion workflows, and rollback procedures.

Integrate automated unit, integration, regression, performance, and security testing into pipelines.

Manage pipeline secrets and credentials using secure methods.

Troubleshoot and optimize pipeline performance, reliability, and maintainability.

Establish appropriate logging, monitoring, alerting, and reporting for pipeline activity.

GitHub Advanced Security

Implement and manage GitHub Advanced Security across repositories and development teams.

Configure and maintain

Code scanning and CodeQL

Secret scanning

Push protection

Dependency review

Dependabot alerts and updates

Define security checks and quality gates for pull requests and production releases.

Review, triage, and support remediation of vulnerabilities and security findings.

Establish processes for responding to exposed credentials, vulnerable dependencies, and insecure code.

Integrate GitHub security results with ticketing, reporting, vulnerability management, and security monitoring platforms.

Develop security metrics and reports covering repository and application security posture.

Promote secure coding and secure development practices across engineering teams.

AWS Cloud Infrastructure

Design, implement, and manage secure AWS infrastructure for development, testing, staging, and production environments.

Deploy and operate AWS services using automated, repeatable processes.

Apply AWS Well-Architected Framework principles, with particular emphasis on security, reliability, operational excellence, and cost optimization.

Manage and secure AWS resources including, where applicable

IAM

VPC

EC2

ECS or EKS

Lambda

RDS

DynamoDB

API Gateway

CloudFront

Route 53

CloudWatch

KMS

Secrets Manager

Systems Manager

Implement appropriate controls for identity, access, encryption, networking, monitoring, logging, backup, and disaster recovery.

Support AWS multi-account and multi-environment deployment strategies.

Investigate and resolve AWS infrastructure, deployment, networking, and service issues.

CloudFormation and Infrastructure as Code

Develop, maintain, and manage AWS CloudFormation Infrastructure as Code templates.

Create reusable templates using parameters, mappings, outputs, conditions, nested stacks, and modular design.

Automate infrastructure provisioning and updates through GitHub Actions.

Establish standards for CloudFormation development, version control, peer review, testing, and deployment.

Implement template validation, linting, security checks, and policy validation.

Monitor and resolve CloudFormation stack failures and infrastructure drift.

Maintain infrastructure documentation, architecture diagrams, deployment guides, and operational runbooks.

Evaluate the use of AWS CDK, SAM, Terraform, or other automation technologies where appropriate.

DevSecOps and Secure Development Processes

Embed security throughout the software development lifecycle.

Define and implement DevSecOps standards, processes, controls, and engineering guardrails.

Partner with development and security teams to implement secure-by-default development and deployment workflows.

Support threat modeling, vulnerability management, security reviews, and risk assessments.

Implement automated checks for

Source code security

Secrets exposure

Dependency vulnerabilities

Container vulnerabilities

Infrastructure misconfigurations

Compliance and policy violations

Support the development of secure coding standards and developer guidance.

Help establish processes for vulnerability remediation, security exceptions, risk acceptance, and compliance reporting.

Ensure that security and operational requirements are incorporated into application and infrastructure designs.

Operations and Continuous Improvement

Participate in incident response, troubleshooting, root-cause analysis, and post-incident reviews.

Improve deployment reliability, availability, security, and operational efficiency.

Identify opportunities to eliminate manual processes through automation.

Support release planning, change management, and production deployment activities.

Monitor CI/CD and AWS environments for availability, performance, security, and cost.

Create and maintain operational documentation and support procedures.

Mentor junior DevOps, cloud, and development team members.

Contribute to technical roadmaps, architecture decisions, and engineering standards.

Requirements

8+ years experience in DevOps, DevSecOps, cloud engineering, platform engineering, or a related discipline.

Strong practical experience setting up and administering

GitHub , preferably GitHub Enterprise.

Significant experience designing and managing

GitHub Actions CI/CD pipelines .

Hands-on experience implementing and managing

GitHub Advanced Security .

Strong experience with

AWS cloud infrastructure, deployments, and operational processes .

Demonstrable experience developing and maintaining

AWS CloudFormation templates .

Experience implementing CI/CD pipelines across multiple environments.

Strong understanding of Git workflows, branching strategies, pull requests, code reviews, and release management.

Experience with automated security tools, including SAST, SCA, secret scanning, dependency scanning, container scanning, and Infrastructure as Code scanning.

Strong understanding of AWS IAM, networking, encryption, secrets management, logging, and monitoring.

Experience with scripting and automation using one or more of the following

Python

Bash

PowerShell

JavaScript or TypeScript

Experience troubleshooting complex application, infrastructure, cloud, and pipeline issues.

Strong understanding of software development lifecycle processes.

Experience working collaboratively with developers, architects, security professionals, and operations teams.

Excellent communication, documentation, and problem-solving skills.

Ability to work independently while providing technical leadership and mentoring to others.

Preferred, but not required

AWS Certified DevOps Engineer – Professional.

AWS Certified Solutions Architect or AWS Certified Security – Specialty.

Experience with GitHub Enterprise Cloud or GitHub Enterprise Server.

Experience managing AWS Organizations and multi-account AWS environments.

Experience with AWS Control Tower and Service Control Policies.

Experience with Docker, Kubernetes, Amazon ECS, or Amazon EKS.

Experience with AWS Lambda and AWS Serverless Application Model.

Experience with AWS CDK, Terraform, or Ansible.

We offer

A highly competitive compensation and benefits package.

A multinational organization with 58 offices in 22 countries and the possibility to work abroad.

10 days of paid annual leave (plus sick leave and national holidays).

Maternity & paternity leave plans.

A comprehensive insurance plan including medical, dental, vision, life insurance, and long-/short-term disability (plans vary by region).

Retirement savings plans.

A higher education certification policy.

Commuter benefits (varies by region).

Extensive training opportunities, focused on skills, substantive knowledge, and personal development.

On-demand Udemy for Business for all Synechron employees with free access to more than 5000 curated courses.

Coaching opportunities with experienced colleagues from our Financial Innovation Labs (FinLabs) and Center of Excellences (CoE) groups.

Cutting edge projects at the world’s leading tier-one banks, financial institutions and insurance firms.

A flat and approachable organization.

A truly diverse, fun-loving, and global work culture.

S YNECHRON’S DIVERSITY & INCLUSION STATEMENT

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.

Company	Synechron
Location	Piscataway, New Jersey
Type	FULL TIME
Niche	Full-time
Salary	$1,10,000 – $1,10,000 / yr

Explore 1M+ Live Opportunities.