Paysign is seeking an AWS DevOps Engineer to support and maintain cloud infrastructure, CI/CD pipelines, and containerized application deployments across multiple AWS environments including Cardholder Data Environment (CDE) accounts subject to PCI-DSS requirements. This role works across the same core DevOps domains as the senior team, contributing to release management, cloud services, networking, security operations, and production support while building depth and expertise in each area.

Key Responsibility Areas

Release Management / CI/CD / GitLab

Build, maintain, and troubleshoot GitLab CI/CD pipelines for application builds, testing, and deployments
Support deployment automation and environment promotion workflows across development, test, staging, and production including CDE environments
Manage container image builds in ECR including vulnerability scanning and lifecycle policies

AWS Services / EC2 / ECS / Lambda via Terraform

Maintain and extend AWS infrastructure across multiple accounts using Terraform, including CDE-designated accounts
Support ECS Fargate/EC2 services including deployments, task definition updates, scaling configurations, and troubleshooting
Assist with Lambda function deployments and serverless service management
Manage day-to-day operations of S3, CloudFront, Route 53, Secrets Manager, and other AWS services

Network Infrastructure / VPC / Security Groups / Routing

Maintain VPC configurations, subnet management, and security group rules across environments with awareness of CDE segmentation boundaries
Troubleshoot network connectivity issues including cross-account routing, DNS resolution, and load balancer configurations

SecOps / Firewall / WAF / IAM / Policy

Assist with IAM role and policy management, access reviews, and permission configurations across CDE and non-CDE accounts
Support WAF rule management and security group auditing
Assist with SOC 2 and PCI-DSS compliance tasks including evidence collection, documentation, and access reviews
Follow CDE change management procedures for all infrastructure modifications

Production Support / On-Call / Datadog / CloudWatch

Monitor system health using Datadog and CloudWatch; respond to alerts and investigate issues across CDE and non-CDE environments
Participate in on-call rotation and incident response for production environments with documented incident handling per CDE procedures
Maintain runbooks, operational documentation, and post-incident reports

Required Qualifications

3+ years of experience in DevOps, cloud engineering, or systems administration
2+ years of hands-on AWS experience (ECS, EC2, RDS, S3, IAM, VPC)
Experience with Infrastructure as Code tools (Terraform preferred)
Experience with CI/CD tools (GitLab CI, Jenkins, GitHub Actions, or similar)
Working knowledge of Docker and container orchestration
Solid Linux command-line and scripting skills (Bash)
Understanding of networking fundamentals (DNS, load balancing, security groups, VPNs)

Preferred Qualifications

AWS certifications (Cloud Practitioner, Solutions Architect Associate, or similar)
Experience working in PCI-DSS or other regulated environments
Experience with GitLab CI/CD specifically
Familiarity with Datadog, CloudWatch, or equivalent monitoring platforms
Experience in fintech, healthcare, or payment processing industries
Python scripting experience
Exposure to WAF, IAM policy design, or security operations

Job description