KGiSL Hiring! Full Time Full-Stack Engineer (DevOps - Cloud) in Federal Territory - Ricebowl

About the role

We’re looking for a hands-on engineer to maintain and evolve our GenAI-built applications while keeping our AWS cloud environment running smoothly day to day. You’ll split your time roughly 60% application development and 40% cloud operations (run / BAU), working closely with the Lead Cloud & DevOps.

The cloud side of this role is focused on run operating, maintaining, and automating existing AWS infrastructure.

Our applications are built with the help of generative-AI coding tools, so you should be comfortable working that way yourself whether with Kiro or VS Code + GitHub Copilot using AI to move faster while keeping full ownership of quality, security, and architecture.

What you’ll doApplication development & maintenance (≈60%)

You’ll maintain and extend a growing portfolio of GenAI-assisted applications. Today that includes:

·        A budget management web app: React 18 / Vite / Material UI frontend, Node.js / Express backend, PostgreSQL, running on Kubernetes, with AWS integrations (S3, Bedrock, Textract, Secrets Manager) and Okta / OIDC auth.

·        A serverless document management system built on API Gateway, Lambda, DynamoDB, and OpenSearch.

The portfolio is expected to grow, so you’ll onboard and support additional applications over time.

In this area you’ll:

·        Build new features, fix bugs, and keep the apps secure and up to date.

·        Use GenAI coding tools (Kiro / GitHub Copilot) effectively while reviewing and validating what they produce.

·        Write and maintain automated tests and keep code-quality gates green (e.g. SonarQube).

·        Containerize and ship with Kubernetes (EKS), packaging with Helm and deploying via GitHub Actions and ArgoCD (GitOps).

·        Patch and rebuild Docker images to remediate security findings and keep base images current.

Cloud operations — run / BAU (≈40%)

·        Operate and maintain existing AWS infrastructure, keeping environments healthy, patched, and compliant.

·        Handle day-to-day BAU: monitoring, incident response, cost and capacity management, routine changes, and support requests.

·        Maintain infrastructure as code with Terraform — apply changes safely, keep state and modules tidy, and review plans.

·        Support core services in operation: API Gateway, Lambda, DynamoDB, Cognito, OpenSearch, EC2, EKS, ECS, ECR, RDS, VPC/networking, CloudFront, WAF, Route 53, KMS, Secrets Manager, S3, IAM, GuardDuty, and more.

·        Triage and remediate security findings across the stack using AWS Security Hub, Amazon Inspector, AWS Security Agent, and Veracode — including patching Docker images and dependencies.

·        Automate repetitive operational work — reduce manual steps, improve reproducibility, and strengthen CI/CD pipelines.

·        Help operate multi-account governance with AWS Organizations / Control Tower (AFT) and IAM Identity Center.

·        Monitor and observe: Dynatrace, CloudWatch, Grafana, and security tooling.

What we’re looking for

We don’t expect you to tick every box below. The must-haves are what matter, the rest you can pick up on the job especially if you’re comfortable learning with GenAI tooling.

Must-have

·        4-5 years building and maintaining web applications with strong JavaScript/TypeScript, React, and Node.js/Express.

·        2+ years of hands-on AWS production experience operating and maintaining cloud infrastructure in a run / BAU context.

·        Working Terraform (infrastructure as code) experience, with a genuine interest in automating cloud operations.

·        Comfortable with Docker (including patching images for security fixes).

·        Familiarity with CI/CD (GitHub Actions or similar) and Git-based workflows.

·        A security-minded approach: least-privilege IAM, secrets management, and network segmentation.

·        Comfortable building with generative-AI coding tools (Kiro, or VS Code + GitHub Copilot).

Nice-to-have (or willing to learn)

·        Broader serverless on AWS: API Gateway, Lambda, DynamoDB, OpenSearch, Cognito, ECS.

·        Kubernetes (or quick to learn it) — the apps run on EKS.

·        Helm charts and GitOps delivery (ArgoCD).

·        Security tooling for triage and remediation: Security Hub, Amazon Inspector, AWS Security Agent, Veracode.

·        Multi-account AWS setups (Organizations, Control Tower/AFT, IAM Identity Center) and services such as EKS, CloudFront/WAF.

·        Observability stacks (Dynatrace, CloudWatch, Grafana) and SAST tools (SonarQube).

·        Entra / Okta / OIDC authentication.

·        AWS AI services (Bedrock).

How you work

·        You take ownership end-to-end and switch easily between application code and cloud operations.

·        You keep the lights on reliably and look for ways to automate recurring operational toil.

·        You use GenAI tooling to go faster but stay accountable for correctness, security, and design.

·        You collaborate closely with the Lead Cloud & DevOps and the wider team.