What are the responsibilities and job description for the AWS DevOps Engineer position at Paysign, Inc.?
Paysign is seeking an AWS DevOps Engineer to support and maintain cloud infrastructure, CI/CD pipelines, and containerized application deployments across multiple AWS environments including Cardholder Data Environment (CDE) accounts subject to PCI-DSS requirements. This role works across the same core DevOps domains as the senior team, contributing to release management, cloud services, networking, security operations, and production support while building depth and expertise in each area.
Key Responsibility Areas
Release Management / CI/CD / GitLab
- Build, maintain, and troubleshoot GitLab CI/CD pipelines for application builds, testing, and deployments
- Support deployment automation and environment promotion workflows across development, test, staging, and production including CDE environments
- Manage container image builds in ECR including vulnerability scanning and lifecycle policies
AWS Services / EC2 / ECS / Lambda via Terraform
- Maintain and extend AWS infrastructure across multiple accounts using Terraform, including CDE-designated accounts
- Support ECS Fargate/EC2 services including deployments, task definition updates, scaling configurations, and troubleshooting
- Assist with Lambda function deployments and serverless service management
- Manage day-to-day operations of S3, CloudFront, Route 53, Secrets Manager, and other AWS services
Network Infrastructure / VPC / Security Groups / Routing
- Maintain VPC configurations, subnet management, and security group rules across environments with awareness of CDE segmentation boundaries
- Troubleshoot network connectivity issues including cross-account routing, DNS resolution, and load balancer configurations
SecOps / Firewall / WAF / IAM / Policy
- Assist with IAM role and policy management, access reviews, and permission configurations across CDE and non-CDE accounts
- Support WAF rule management and security group auditing
- Assist with SOC 2 and PCI-DSS compliance tasks including evidence collection, documentation, and access reviews
- Follow CDE change management procedures for all infrastructure modifications
Production Support / On-Call / Datadog / CloudWatch
- Monitor system health using Datadog and CloudWatch; respond to alerts and investigate issues across CDE and non-CDE environments
- Participate in on-call rotation and incident response for production environments with documented incident handling per CDE procedures
- Maintain runbooks, operational documentation, and post-incident reports
Required Qualifications
- 3 years of experience in DevOps, cloud engineering, or systems administration
- 2 years of hands-on AWS experience (ECS, EC2, RDS, S3, IAM, VPC)
- Experience with Infrastructure as Code tools (Terraform preferred)
- Experience with CI/CD tools (GitLab CI, Jenkins, GitHub Actions, or similar)
- Working knowledge of Docker and container orchestration
- Solid Linux command-line and scripting skills (Bash)
- Understanding of networking fundamentals (DNS, load balancing, security groups, VPNs)
Preferred Qualifications
- AWS certifications (Cloud Practitioner, Solutions Architect Associate, or similar)
- Experience working in PCI-DSS or other regulated environments
- Experience with GitLab CI/CD specifically
- Familiarity with Datadog, CloudWatch, or equivalent monitoring platforms
- Experience in fintech, healthcare, or payment processing industries
- Python scripting experience
- Exposure to WAF, IAM policy design, or security operations