AWS Security Engineer

Client: Banking, Financial sDuration: July 20 – Oct 31 (high possibility of extension )Location: Toronto, ON (remote

)

Top Skil ls:5+ years of experience in AWS-focused DevOps/Platform Engineering roles supporting complex enterprise delivery pipeli nesStrong hands-on expertise in Policy-as-Code and automation, including Python and Rego with tools like OPA Gatekeeper and AWS Con figProven experience with Infrastructure as Code and CI/CD pipelines, including Terraform/CloudFormation and GitHub Actions or Jenkins in production environme

nts Job Descript ion:On behalf of our client, Affinity is seeking an AWS Engineer to support the design, implementation, and governance of secure, scalable cloud delivery pipelines within a modern AWS environment. This role is ideal for an experienced DevSecOps or Platform Engineer who thrives at the intersection of automation, security, and infrastructure. You will play a key role in advancing policy-driven pipelines, strengthening compliance through Policy-as-Code, and enabling reliable, automated cloud operations at sc

ale. Responsibili ties:Develop and maintain automation solutions using Python and Rego to support policy enforcement and operational work flowsDesign and implement Policy-as-Code frameworks (e.g., AWS Config, OPA Gatekeeper) to enforce security, compliance, and operational guard railsDevelop and manage Infrastructure as Code (IaC) using Terraform and AWS CloudFormation aligned to enterprise stan dardsIntegrate application and infrastructure code into CI/CD pipelines (GitHub Actions, Jenkins) to support automated build, test, and deployment work flowsEnsure adherence to pipeline governance standards, including automated validation, approval gates, and policy enforcement con trolsUtilize Git/GitHub for version control, including code management, pull requests, peer reviews, and audit traceab ilityDevelop scripts and automation workflows to improve deployment efficiency and reduce manual e ffortDesign, deploy, and manage Kubernetes workloads, including configuration, scaling, and lifecycle manag ementSupport integration with AWS platform services, including IAM, networking, compute, and storage compo nentsTroubleshoot, debug, and optimize pipeline and deployment issues within AWS environ mentsValidate pipeline outputs (logs, artifacts, results) to ensure compliance with defined standards and con trolsConduct peer reviews of code, IaC templates, and pipeline configurations to maintain quality and consis tencyProvide guidance on secure architecture design, DevSecOps integration, and AWS best prac ticesContribute to pipeline standardization efforts, including reusable templates and automation pat ternsDocument issues, risks, and improvement opportunities to drive continuous improvement across DevOps prac

tices Qualifica tions:5+ years of experience in DevOps, Cloud Engineering, or Platform Engineering within enterprise enviro nmentsStrong proficiency in Python scripting and Rego (OPA) for automation and policy devel opmentHands-on experience implementing Policy-as-Code frameworks (e.g., AWS Config, OPA Gatekeeper or equiv alent)Proven experience delivering Infrastructure as Code using Terraform and/or AWS CloudFor mationExperience building and maintaining CI/CD pipelines using GitHub Actions, Jenkins, or similar toolsAdvanced knowledge of Git-based version control, including branching, pull requests, and code review pro cessesHands-on experience deploying and managing Kubernetes environments in prod uctionDeep understanding of AWS cloud services, including IAM, VPC networking, EC2, S3, and security services such as Gua rdDutyStrong knowledge of AWS Well-Architected Framework and security best pra cticesExperience implementing pipeline governance controls, including validation, testing, and approval wor kflowsDemonstrated experience in DevSecOps environments, embedding security into CI/CD pip elinesStrong troubleshooting and debugging skills across cloud infrastructure and deplo ymentsFamiliarity with compliance frameworks and secure development practices in enterprise enviro nmentsExcellent communication skills, with the ability to collaborate across platform, security, and application teamsExperience contributing to standardization, automation, and reusable DevOps patterns across

teams