Senior AWS DevOps Engineer

About the Position

We’re working with a maritime training and simulation company based in the Netherlands. The company provides training, assessment, simulation, and digital learning solutions for the global maritime industry. The project focuses on the cloud platform behind these services, which runs on AWS and Kubernetes and is being evolved into a secure, reliable, and maintainable multi-account environment managed through Infrastructure as Code. The infrastructure is also being prepared for future ISO/IEC 27001 certification, with a strong focus on security, access control, traceability, and operational reliability.

Responsibilities

• Develop reusable OpenTofu or Terraform modules and environment configurations.
• Build and maintain GitHub Actions validation and deployment pipelines.
• Implement a GitOps approach for existing EKS services.
• Build and operate multi-account AWS infrastructure.
• Manage AWS resources including VPC, EKS, ECR, IPAM, IAM Identity Center, KMS, S3 state, Client VPN, and GitHub OIDC.
• Develop a strategy for migrating existing AWS resources into OpenTofu/Terraform state.
• Secure EKS access, including private API connectivity and restricted public CIDRs.
• Maintain encrypted, isolated, and recoverable OpenTofu/Terraform state.
• Implement logging, monitoring, consistent tagging, access reviews, and controlled infrastructure changes.
• Improve the scalability and reliability of EKS services.
• Support disaster recovery and reduce cross-account blast radius.
• Create security and operational documentation and evidence required for ISO 27001 readiness.
• Participate in pull request reviews and ensure infrastructure changes are traceable and approved.

Requirements

• Strong hands-on experience with AWS architecture and administration.
• Production experience with OpenTofu or Terraform.
• Experience with GitHub Actions and AWS authentication through OIDC.
• Experience implementing GitOps from scratch.
• Strong knowledge of Amazon EKS and Kubernetes.
• Experience with AWS Organizations or another multi-account architecture.
• Strong knowledge of AWS networking, including VPC, routing, endpoints, IPAM, VPN, and private connectivity.
• Strong understanding of AWS IAM, IAM Identity Center, permission boundaries, KMS, and least-privilege design.
• Experience with remote-state security, locking, migration, and recovery.
• Experience with infrastructure security, audit logging, monitoring, and secrets management.
• Experience with Git-based change management and code review.
• Experience preparing cloud infrastructure for ISO/IEC 27001 or a comparable security framework.
• Ability to translate security requirements into infrastructure controls and documented procedures.
• Ability to produce auditable evidence from Infrastructure as Code, AWS configuration, and CI/CD workflows.

Nice to Have

• Data Lake and BI dashboard integration
• Datadog and CloudWatch
• RDS MySQL and ElastiCache
• ECR replication and cross-account access
• SAML federation and AWS Client VPN
• Route 53, ACM, ALB, SES, ECS, and EC2
• Secure integration of AI-assisted engineering tools

We Offer

• Flexible work format: work remotely or from one of our hubs in Kyiv, Lviv, Kharkiv, or Wrocław. We also have flexible working hours.
• Professional growth: access to Tech Guilds, mentoring, meetups, knowledge sharing, and other opportunities to develop your expertise.
• Education support: we cover 50% of the cost of professional courses, trainings, webinars, and certifications.
• English: free General English, Business English, speaking clubs, and other opportunities to improve your communication skills.
• Time off: 20 paid days off and 7 paid sick days per year, plus additional days off.
• Support when you need it: legal and accounting support, as well as other forms of assistance available to Techstack employees.
• Community: online and offline team activities, knowledge-sharing events, appreciation gifts, and other ways to stay connected with colleagues.

About the Company

Techstack is a technology product engineering company that sets an example for high development standards in the IT industry. We empower each team member to influence the development of the product, company, and processes.

Want to make an impact? You're in the right place.