Senior Platform Engineer – Platform Reliability

CloudWave Digital

Contract · Remote · Flexible hours

About the role

CloudWave Digital is launching the Aegis Shield initiative to harden security across its suite of cloud‑hosted applications. As a Platform Engineer you will drive the design, implementation, and validation of security controls within our CI/CD pipelines and runtime environments.

Key responsibilities

• Audit existing Terraform modules and remediate IaC vulnerabilities using Checkov and tfsec.
• Integrate automated container scanning (Trivy, Aqua) into GitHub Actions for all Docker images.
• Implement runtime security policies in AWS GuardDuty and Security Hub, and produce weekly compliance reports.
• Configure AWS WAF and IAM least‑privilege roles for microservices in the Aegis Shield module.
• Lead a 2‑week penetration testing sprint, triage findings, and close critical issues before release.
• Document hardening standards and create a reusable security blueprint for future projects.

Must-have skills

• Extensive experience with Terraform, CloudFormation, or Pulumi.
• Proficiency in Docker and Kubernetes (EKS) security best practices.
• Strong knowledge of AWS services, especially IAM, GuardDuty, and WAF.
• Hands‑on CI/CD pipeline automation using GitHub Actions or Jenkins.
• Security testing tools experience (e.g., Trivy, Snyk, OWASP ZAP).

Nice to have

• Certifications such as AWS Security Specialty or Certified Kubernetes Security Specialist.
• Experience with serverless security hardening (Lambda, API Gateway).