{"id":3453948,"url":"https://alion.io/job/globallogic-devops-engineer-aws-networking-and-security","title":"DevOps engineer (AWS Networking and Security)","company":{"id":46391,"name":"GlobalLogic","domain":"globallogic.com","url":"https://alion.io/company/globallogic","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon ECS","optional":false},{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CloudFormation","optional":false},{"name":"DNS","optional":false},{"name":"OpenSearch","optional":false},{"name":"Terraform","optional":false},{"name":"Least Privilege","optional":true}],"status":"live","first_seen_at":"2026-10-26T17:39:23Z","employer_posted_date":null,"last_verified_at":"2026-10-26T17:39:23Z","board_verified":false,"closed_at":null,"days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"Essential experience\n\nDeep, hands-on AWS networking: VPC and subnet design, routing, security groups\n\nDelivering network re-architecture on live production platforms with zero downtime\n\nControlling egress for serverless and container workloads\n\nSecuring data stores at the network layer\n\nTechnologies and tools\n\nNetworking: Amazon VPC, subnets, route tables, NAT gateways, Internet gateways, Transit Gateway (if in use)\n\nNetwork security: Security groups, network ACLs, AWS Network Firewall, Route 53 Resolver DNS Firewall\n\nPrivate connectivity: VPC endpoints (gateway and interface / PrivateLink)\n\nData stores: Amazon OpenSearch Service (VPC domains, access policies)\n\nWorkloads: AWS Lambda (VPC-attached), Amazon ECS (awsvpc networking)\n\nObservability: VPC Flow Logs, Reachability Analyzer, CloudWatch\n\nInfrastructure as code: AWS CloudFormation and/or AWS CDK, or Terraform\n\nDesirable\n\nAmazon OpenSearch Service security configuration\n\nAWS Network Firewall or equivalent egress filtering\n\nAWS certification (e.g. Advanced Networking – Specialty)\n\nJob Responsibilities\n\nRestrict network access to internal Amazon OpenSearch domains using VPC placement, security groups and access policies\n\nRedesign VPC and subnet layout so Lambda and ECS workloads route through controlled egress points\n\nImplement egress controls such as NAT gateways, AWS Network Firewall, VPC endpoints (PrivateLink) and route table changes, per the agreed design\n\nTighten security groups and network ACLs to least privilege\n\nPlan and execute zero-downtime migrations: staged cutovers, traffic validation, tested rollback\n\nUse VPC Flow Logs and Reachability Analyzer to baseline traffic before change and verify it after\n\nDeliver all network changes as infrastructure as code with peer review\n\nProduce network diagrams and runbooks for the platform team\n\nDepartment/Project Description\n\nThe Client is one of the majour insurance companies in the UK.\n\nThis role supports a high-priority risk reduction programme for the Green Flag MyCro Platform, a complex technology estate built on AWS. Platform SMEs have already designed remediation plans and started putting them into effect. The DevOps engineer we're looking for will lock down subnet-level access to internal OpenSearch indexes and reconfigure the platform's VPC and subnet design so egress from hosted Lambda functions and ECS clusters can be controlled. These are complex, platform-wide network changes that must be delivered with zero downtime. You will join a new squad led by a Platform SME.","description_format":"text","description_chars":2524,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-29T12:21:41Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":8,"expected_fill_days":30,"reasons":["seen:8","velocity","win:early","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/globallogic-devops-engineer-aws-networking-and-security","json_url":"https://alion.io/job/globallogic-devops-engineer-aws-networking-and-security.json","meta":{"generated_at":"2026-11-04T11:48:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17688,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46391},"rest":"https://alion.io/mcp/rest/get_company?id=46391"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgloballogic-devops-engineer-aws-networking-and-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgloballogic-devops-engineer-aws-networking-and-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgloballogic-devops-engineer-aws-networking-and-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/globallogic-devops-engineer-aws-networking-and-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgloballogic-devops-engineer-aws-networking-and-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3453948}},{"tool":"search_jobs","arguments":{"company":"globallogic.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3453948},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}