DevOps Engineer – AWS, Terraform, CI/CD

About the role

Aspire Software is seeking a DevOps Engineer to join its Lebanon team. You will own and evolve the cloud infrastructure, improve developer experience, and lead security and compliance initiatives across multiple product lines.

Key responsibilities

• Operate and optimise AWS services (EC2, ECS, Lambda, RDS, ElastiCache, SQS, IAM, VPC, Cloudflare, Route 53).
• Advance Infrastructure‑as‑Code using Terraform, ensuring all production changes are version‑controlled and reviewed.
• Identify cost‑saving opportunities, manage Reserved Instances, and implement backup, restore and disaster‑recovery processes with defined RTO/RPO.
• Transition monitoring from reactive CloudWatch alarms to observability stacks with APM, structured logging and tenant‑level alerts.
• Maintain the on‑premise‑to‑cloud bridge for Clubspeed via Amazon SQS.
• Design and maintain CI/CD pipelines in GitHub Actions for .NET, Node.js, React, Next.js, PHP/Laravel, Angular and MySQL projects.
• Embed quality and security gates (unit/integration tests, SAST, DAST, dependency scanning, SBOM generation, license checks, container scanning, secrets detection).
• Implement secrets management (AWS Secrets Manager, GitHub OIDC) and rotate credentials.
• Lead PCI DSS 4.0.1 remediation, manage SBOMs, tighten IAM, network segmentation and audit logging.
• Coordinate third‑party penetration tests and maintain Vanta compliance records.
• Handle day‑to‑day IT tasks: laptop provisioning, account lifecycle, MFA/SSO, endpoint hygiene and vendor licensing.

Required profile

• Proven experience managing production‑grade AWS environments and Terraform codebases.
• Strong background in CI/CD pipeline creation and automation.
• Hands‑on knowledge of security best practices, PCI DSS compliance and secrets management.
• Ability to work across multiple technology stacks ( .NET, Node.js, PHP/Laravel, Angular, React, Next.js ).
• Experience with backup, disaster‑recovery planning and cost optimisation.

Required skills

• AWS (EC2, ECS, Lambda, RDS, ElastiCache, SQS, IAM, VPC, Cloudflare, Route 53)
• Terraform
• GitHub Actions
• .NET, Node.js, React, Next.js, PHP, Laravel, Angular, MySQL
• SAST, DAST, SBOM, dependency scanning, container scanning
• AWS Secrets Manager, GitHub OIDC
• PCI DSS 4.0.1 compliance