Senior Quality Engineer – Cloud Infrastructure & DevOps Validation

About the role

We are seeking a Senior Quality Engineer with deep expertise in AWS, cloud infrastructure, and DevOps to validate and ensure the reliability, security, and compliance of production‑ready environments. The role is a 1‑year consultancy, hybrid work mode, focused on testing infrastructure, security controls, deployment pipelines, and disaster‑recovery processes.

Key responsibilities

• Validate AWS infrastructure provisioning against approved architecture, including VPCs, subnets, and security groups.
• Verify IAM roles and policies follow least‑privilege principles.
• Validate cloud security guardrails using AWS Config, GuardDuty, and WAF.
• Test encryption for sensitive data at rest and in transit.
• Assess auto‑scaling, backup, disaster‑recovery, and failover configurations.
• Ensure compliance with data‑privacy regulations and PCI‑DSS where applicable.
• Validate logging and monitoring via CloudWatch and CloudTrail.
• Review CI/CD pipelines, build automation, and deployment processes, including blue‑green, canary, and rolling strategies.
• Verify rollback mechanisms and environment promotion across Dev, Test, UAT, and Production.
• Check secrets management to prevent hard‑coded credentials.
• Validate SAST/DAST and other security scanning steps within pipelines.

Required profile

• Bachelor's degree in Software Engineering, Computer Science, IT, or related field.
• 5+ years of experience in QA/DevOps with strong exposure to cloud infrastructure and CI/CD validation.
• Hands‑on knowledge of AWS services for infrastructure, logging, monitoring, and configuration validation.
• Understanding of cloud security, compliance, and automated security guardrails.
• Proven experience validating CI/CD pipelines and deployment automation.
• Experience with disaster‑recovery and failover testing.

Required skills

• AWS (VPC, Subnets, Security Groups, IAM, Config, GuardDuty, WAF, CloudWatch, CloudTrail, CodePipeline, CodeDeploy, Secrets Manager, Parameter Store)
• CI/CD pipeline validation and automation
• Python
• TypeScript
• SAST and DAST security scanning
• Blue‑green, canary, rolling deployment strategies
• Disaster recovery and failover testing
• PCI‑DSS compliance
• Data‑privacy regulations (CCPA)