Senior DevOps Engineer Needed for Release Pipeline Hardening Overhaul

NexGen Media

Contract · Remote · Flexible hours

About the role

NexGen Media is launching a security hardening initiative for its cloud‑hosted suite, codenamed "Astra Shield". We need a Senior DevOps Engineer to design, implement, and verify hardening controls across our AWS environments while maintaining CI/CD flow.

Key responsibilities

• Audit existing Terraform IaC for compliance gaps and refactor modules to enforce CIS Benchmarks.
• Integrate automated security scans (Checkov, Trivy) into GitHub Actions pipelines.
• Configure AWS GuardDuty, Security Hub, and IAM policies for least‑privilege access.
• Containerize legacy services with Docker, migrate them to EKS, and apply Pod Security Standards.
• Develop runbooks for incident response and conduct quarterly hardening validation drills.

Must-have skills

• Deep experience with AWS services, especially IAM, VPC, and GuardDuty.
• Proficiency in Terraform and CloudFormation for infrastructure as code.
• Strong command of Docker, Kubernetes (EKS) and CI/CD tooling.
• Hands‑on knowledge of security scanning tools (Checkov, Trivy, Snyk).

Nice to have

• Experience with Open Policy Agent (OPA) for policy enforcement.
• Familiarity with serverless security patterns (Lambda, API Gateway).