Job Description:

Our client is adding a Senior DevOps engineer to design, build, and run an agentic application that integrates with security tooling [Aikido, Qualys and/or similar], Docker images, AWS [ECR], and the GitHub platform. This role requires a deep knowledge of Amazon Web Services [AWS] cloud architecture and commensurate practical experience working in this space. Its purpose is to fix all vulnerabilities on a quarterly basis with an aim to reduce this cadence as much as plausible to ensure the security of our digital assets.

Job Responsibilities:

• Design and develop a Node.js agentic application on AWS AgentCore using Strands or LangChain, that integrates with existing security tooling MCPs, Docker build workflows, and Amazon ECR.
• Build custom MCP servers with FastMCP so the agent can use approved tools against Aikido, ECR, GitHub, and the build system.
• Build automated unit and integration test pipelines that validate the patches and every fix the agent proposes before review.
• Pull in and prioritize open security findings from our security tooling and ECR by severity, exploitability, and ownership, starting with the repositories and images that carry the most critical and high risk.
• Fix supply-chain vulnerabilities in open-source packages, including transitive dependencies, through lockfile updates, safe version upgrades, and configuration changes.
• Implement and extend Static Application Security Testing (SAST), and handle SAST findings in the same monthly remediation process.
• Fix container image vulnerabilities:
• Update base images and packages.
• Harden Docker files.
• Rebuild and rescan images, then push them to ECR.
• Roll the patched images out to ECS services through the normal release process.
• Map vulnerable images to the ECS services and owners that use them and keep ECR clean with lifecycle policies and approved base images.
• Run a quarterly cycle that addresses every in-scope finding. Each finding ends the quarter either fixed and deployed, accepted under a documented exception with a named owner, or assigned to the owning application team.
• Restore scan coverage where it is missing, such as repositories without lockfiles. Track inactive repositories and unused images that still have findings.
• When the quarterly cycle is in a steady state, take on traditional DevOps work: CI/CD pipelines, Docker and ECS workloads, AWS infrastructure, observability, reliability, and deployment automation. Patching always comes first.
• As new security tools are introduced or swapped out, take steps necessary to integrate the application with the new tooling.
• Infrastructure related vulnerabilities including IaC (Infrastructure as Code) scanning, AWS infrastructure misconfigurations, and host-based vulnerabilities on the cloud.

Required qualifications:

• 8+ years in DevOps, platform engineering, or a closely related role.
• Extensive experience with AWS, including ECR, ECS, EKS, and IAM.
• Experience building agents with Strands or LangChain.
• Experience implementing custom MCP servers with tools such as FastMCP.
• Experience building and hosting applications on Node.js.
• Extensive experience with Docker and with container orchestration on ECS, including building, hardening, and patching container images.
• Extensive experience implementing CI/CD pipelines with GitHub Actions.
• Extensive experience fixing supply-chain vulnerabilities in open-source packages.
• Experience implementing Static Application Security Testing (SAST).
• Experience building automated test pipelines for unit and integration testing.
• Clear writing, and good judgment about production risk when automating changes.

Certifications:

• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD) preferred

Salary/Rate: $60-$75/HR (depends on experience level). This is a contract position with candidates expected to work 40 hours/ week.

About Us

Peterson Technology Partners (PTP) is an Equal Opportunity Employer committed to creating a transparent, inclusive, and human-centered hiring experience.

For more than 28 years, PTP has operated as one of the top IT staffing and recruiting firms in the USA—built on trust, long-term partnerships, and technical excellence.

Based in the Chicago suburb of Park Ridge, IL, our team of more than 500 employees and consultants is dedicated to:

• Helping every client make the best hiring decisions possible
• Matching professionals with the right IT jobs and career opportunities

As part of that commitment, we believe in providing clear information about how our hiring technologies work and how your data is used. The following section outlines our AI-assisted interview process and your rights as a candidate.

AI-Assisted Interview Experience (Pete & Gabi – Rebecca):

To provide a consistent, fair, and flexible experience for all candidates, we use AI-assisted tools to support parts of the interview process. This includes our proprietary AI platform Pete & Gabi, which includes AI recruiter Rebecca.

These AI hiring tools help us:

• Conduct recorded video interviews
• Transcribe interviews
• Summarize candidate responses
• Generate job-related insights
• Streamline communication and scheduling

Please note that:

• The AI does NOT make hiring decisions; all decisions are made by our human recruiters, hiring managers, or client partners.
• The AI does not evaluate facial expressions, emotions, or physical traits; it is used only to support fairness, consistency, and efficiency.

If you prefer a non-AI interview format, we will gladly provide an alternative.