Senior DevOps Engineer
Senior DevOps Engineer maintaining and optimizing a mature, multi-account AWS serverless platform (CDK, CodePipeline, Lambda) for an EU institutional project, with focus on CI/CD, IaC, security, observability, and FinOps, while driving an AI-First transformation using AWS Kiro and AI agents. Hybrid work in Portugal.
- Compensation
- Not disclosed
- Location
- Portugal
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Devops
- Posted
Skills
Must have
- Advanced proficiency in AWS, multi-account environments
- Strong experience with Infrastructure as Code (AWS CDK with Python/TypeScript; CloudFormation)
- CI/CD pipeline design and management (CodeBuild, CodePipeline, or equivalent)
- Containerization and orchestration (Docker, ECS/Fargate)
- Serverless architecture (Lambda, API Gateway, Step Functions, EventBridge)
- Networking (VPC, subnets, security groups, PrivateLink, CloudFront)
- Monitoring and observability (CloudWatch, OpenSearch, structured logging)
- Scripting and automation (Python, Bash, PowerShell)
- Database operations (PostgreSQL, Redis, DynamoDB)
- Security hardening (IAM, KMS, WAF, Secrets Manager)
- Security and quality gates in CI/CD (OWASP Dependency Check, Prowler, SonarQube, AWS Config, ECR image scanning)
- FinOps fundamentals (cost allocation, tagging strategies, resource optimization)
- Valid work permit or EU/Schengen nationality to legally work in Portugal
Nice to have
- 5+ years of experience in DevOps/Platform Engineering roles
- Experience with multi-environment deployment strategies and release management
- Familiarity with Agile/Scrum delivery (Jira, Confluence)
- Experience with Git workflows and branching strategies
- Understanding of compliance and data sovereignty requirements (EU context)
- Interest or experience in AI-assisted development tools and workflows
- Strong communication skills and ability to work independently as an SME
- Continuous improvement mindset with track record of optimizing processes
Full description
About the Role
We are looking for a Senior DevOps Engineer to maintain, optimize, and continuously improve the CI/CD platform, infrastructure-as-code, and operational practices for a mature, stable multi-environment AWS ecosystem. The solution is fully developed and in production; the focus is on continuous improvement, cost optimization, reliability, and operational excellence. Additionally, the project is undergoing an AI-First transformation, adopting AWS Kiro and custom AI agents to implement an AI-driven Development Lifecycle (AI-DLC). You will work closely with development squads to ensure fast, reliable, and secure delivery of enhancements and fixes.
Key Responsibilities
- Maintain and evolve CI/CD pipelines (AWS CodeBuild, CodePipeline) ensuring reliability and speed of delivery
- Maintain and improve Infrastructure as Code using AWS CDK (Python primarily, some TypeScript) across multiple AWS accounts
- Optimize serverless infrastructure performance, cost, and reliability (Lambda, API Gateway, AppSync, Step Functions, EventBridge)
- Improve and extend observability solutions (CloudWatch, OpenSearch dashboards, structured logging, alerting)
- Continuously strengthen security posture including IAM policies, KMS encryption, Secrets Manager, and network segmentation
- Maintain and tune data infrastructure components (RDS PostgreSQL, ElastiCache Redis, DynamoDB, S3)
- Review and improve disaster recovery strategies, backup automation, and rollback mechanisms
- Support multi-account governance and cross-account resource management
- Collaborate with development teams on deployment strategies (blue/green, canary, feature flags)
- Drive operational excellence through runbooks, incident response procedures, and post-mortem processes
- Apply FinOps practices to monitor, optimize, and report on cloud cost and resource utilization
- Identify and implement continuous improvement initiatives across infrastructure, pipelines, and operational processes
- Contribute to the AI-First transformation by integrating AI agents and AI-assisted workflows into the development and operations lifecycle
- Troubleshoot production issues and perform root cause analysis
- Mentor junior team members on cloud infrastructure and DevOps practices
Key Challenges
- Sovereign Cloud: reduce footprint on vendor lock-in AWS solutions and migrate workloads toward containers and cloud-native standard technologies
- Migration and Modernization: plan and execute application and workload migration to AWS through 2029