DevOps / Platform Engineer (Cloud Security and Compliance Focus)

About Come Back Agency & Client Position

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the Role

As we scale our operations and infrastructure, we are looking for a hands-on DevOps / Platform Engineer who can design robust cloud environments, standardize infrastructure templates, and support our compliance readiness.

In this role, you will build automated end-to-end cloud infrastructure, manage multi-account AWS environments, support Kubernetes clusters, and collaborate on security hardening. You will also play a key role in supporting upcoming enterprise vendor reviews and compliance readiness (SOC 2 / ISO 27001) by gathering evidence, addressing security gaps, and utilizing cloud security mechanisms.

What You Will Do

• Cloud Architecture & Multi-Account Setup: Design, build, and maintain AWS infrastructure from scratch; standardize multi-account environments (AWS Organizations) and repeatable landing zones.
• Infrastructure & CI/CD: Manage Infrastructure as Code using Terraform and maintain scalable automated CI/CD pipelines (primarily GitHub Actions).
• Container Orchestration: Support and maintain production Kubernetes clusters (Amazon EKS).
• System Migration: Assist with migrating internal and client services/applications to AWS in alignment with security best practices.
• Security Hardening & Access Control: Implement least privilege access (IAM), secrets management, network isolation, and standard security practices across cloud environments.
• Compliance Readiness & Evidence Gathering: Support SOC 2 and/or ISO 27001 readiness by identifying security gaps, collecting audit evidence, and providing technical artifacts (using AWS Artifact, Security Hub, or integrated compliance tools).
• Observability & Incident Support: Standardize logging, monitoring, and alerting across environments to ensure full auditability and infrastructure reliability.
   

Requirements

• Experience: 2.5+ years of practical DevOps / Platform / Cloud Engineering experience managing cloud infrastructure.
• AWS & Infrastructure Design: Strong experience with AWS (IAM, VPC networking, compute, logging) and hands-on experience or familiarity with AWS Organizations and multi-account structures.
• Containers & Kubernetes: Hands-on experience managing and supporting production Kubernetes clusters (Amazon EKS).
• Infrastructure as Code (IaC): Solid experience writing and maintaining Terraform scripts.
• CI/CD: Practical experience configuring deployment pipelines from scratch (GitHub Actions preferred, or GitLab CI / Bitbucket Pipelines).
• Practical Security & Compliance: Familiarity with cloud security controls (IAM, encryption, vulnerability scanning) and practical experience with evidence collection and gap remediation for SOC 2 or ISO 27001 audits.
• Communication: B2+ English level (upper-intermediate or higher) for effective daily communication with US-based stakeholders and auditors.

Nice to Have

• Experience or familiarity with compliance automation platforms (e.g., Vanta, Drata, Secureframe, or AWS Security Hub).
• AWS Certifications (e.g., AWS Certified Solutions Architect, SysOps Administrator, or AWS Certified Security - Specialty).
• Experience with cloud application migrations.
   

What We Offer

• Working hours aligned with US time zones, typically 16:00–23:59 Kyiv time.
• Company-sponsored English lessons to support clear and confident communication.
• Paid vacation and sick days.
• Fully remote work model.
• Opportunities for professional growth and support with professional certifications.
• Structured, personalized onboarding to help you ramp up effectively.

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.