# DevOps Engineer II (Cloud Security)

**Company:** [WHOOP](https://hotfix.jobs/companies/whoop)
**Location:** Boston, MA
**Role:** DevOps / SRE
**Experience:** 2+ years
**Skills:** AWS, Terraform, IAM, Kubernetes, CI/CD, Python, Go, Cloudtrail, EKS, Vpc
**Posted:** 2026-04-17

> Builds and operates secure AWS cloud infrastructure using IaC like Terraform, manages IAM and access controls, implements automation for threat detection, and ensures compliance in Kubernetes environments. Requires 2-4 years DevOps experience with AWS services and scripting.

## Job Description

## Responsibilities

- Design, implement, and manage scalable, secure cloud infrastructure in AWS using Infrastructure as Code (IaC) tools such as **Terraform**
- Build and manage **IAM** systems, access controls, and least-privilege policies to reduce risk and limit blast radius
- Implement automation and tooling to detect misconfigurations, privilege escalation risks, and anomalous behavior
- Build and maintain secure, reliable, and auditable **AWS** and **Kubernetes** environments across multiple accounts and services
- Improve secrets management, key rotation, and secure service-to-service authentication patterns
- Collaborate with platform, product, and data science teams to deliver resilient infrastructure that enables rapid product development and member trust
- Contribute to the automation of cloud operations, from **CI/CD** pipelines to monitoring and alerting systems
- Develop and enforce guardrails for cloud security and compliance, including IAM, backups, logging, and configuration management
- Participate in incident response and troubleshooting for infrastructure and security events
- Participate in audits and compliance efforts by ensuring infrastructure is observable, auditable, and well-documented
- Drive best practices in reliability, performance, cost optimization, and security across the platform

## Qualifications

- 2-4 years of experience in **DevOps**, **Site Reliability Engineering**, or **Cloud Infrastructure** roles
- Hands-on experience with **AWS** services, including **IAM**, **VPC**, **EC2**, **S3**, and **CloudTrail**
- Experience with **Infrastructure as Code** in production environments (**Terraform** preferred)
- Strong understanding of cloud security and reliability principles, including least privilege, logging/monitoring, resource isolation, and disaster recovery
- Experience with containerized platforms such as **Kubernetes** or **Amazon EKS**
- Proficiency with scripting or programming languages (**Python**, **Go**, **Java**, or **Bash**)
- Familiarity with **CI/CD** pipelines, secrets management, and automated security or reliability tooling
- Strong problem-solving skills and ability to debug complex distributed systems
- Effective communication skills and ability to collaborate across teams

## Bonus Qualifications

- Experience with cloud security tooling (e.g., **CSPM**, **CNAPP**, **SIEM** platforms)
- Experience with compliance frameworks (e.g. **SOC 2**, **HIPAA**, **GDPR**, **SOX**, and/or **SaMD**)
- Experience implementing **policy-as-code** or access control frameworks
- Exposure to modern edge and delivery technologies such as **Cloudflare**, **CDN** configuration, and **TLS/SSL** certificate management

## Similar roles

- [Software Engineer L2](https://hotfix.jobs/jobs/e51086c6-a570-4618-820b-b74f0e266de7) - Twilio - Remote - $117k – $172k/yr
- [Forward Deployed Infrastructure Engineer, Internship](https://hotfix.jobs/jobs/a75f39de-cb9b-44d4-81dd-091fda8e75d2) - Palantir - Palo Alto, CA
- [Software Engineer](https://hotfix.jobs/jobs/e999a5f4-c744-43d0-9154-41c0fcd88ebe) - Astronomer - New York, NY - $144k – $235k/yr
- [Software Engineer, Infrastructure](https://hotfix.jobs/jobs/810e9ab1-5e92-4cc8-92a1-2ef9a3a471ce) - Chime - San Francisco, CA - $133k – $184k/yr
- [Software Engineer, Cloud Networking](https://hotfix.jobs/jobs/8cdf75d0-36fb-4f0d-a795-f7b623d81d3b) - Airbnb - Remote - $157k – $185k/yr

**Apply:** https://hotfix.jobs/jobs/f7cc61c3-5f58-4364-8bb0-7e206adba551
**Canonical:** https://hotfix.jobs/jobs/f7cc61c3-5f58-4364-8bb0-7e206adba551