Job description

Job Description: Our client is adding a Senior DevOps engineer to design, build, and run an agentic application that integrates with security tooling [Aikido, Qualys and/or similar], Docker images, AWS [ECR], and the GitHub platform. This role requires a deep knowledge of Amazon Web Services [AWS] cloud architecture and commensurate practical experience working in this space. Its purpose is to fix all vulnerabilities on a quarterly basis with an aim to reduce this cadence as much as plausible to ensure the security of our digital assets. Job Responsibilities: Design and develop a Node.js agentic application on AWS AgentCore using Strands or LangChain, that integrates with existing security tooling MCPs, Docker build workflows, and Amazon ECR. Build custom MCP servers with FastMCP so the agent can use approved tools against Aikido, ECR, GitHub, and the build system. Build automated unit and integration test pipelines that validate the patches and every fix the agent proposes before review. Pull in and prioritize open security findings from our security tooling and ECR by severity, exploitability, and ownership, starting with the repositories and images that carry the most critical and high risk. Fix supply-chain vulnerabilities in open-source packages, including transitive dependencies, through lockfile updates, safe version upgrades, and configuration changes. Implement and extend Static Application Security Testing (SAST), and handle SAST findings in the same monthly remediation process. Fix container image vulnerabilities: Update base images and packages. Harden Docker files. Rebuild and rescan images, then push them to ECR. Roll the patched images out to ECS services through the normal release process. Map vulnerable images to the ECS services and owners that use them and keep ECR clean with lifecycle policies and approved base images. Run a quarterly cycle that addresses every in-scope finding. Each finding ends the quarter either fixed and deployed, accepted under a documented exception with a named owner, or assigned to the owning application team. Restore scan coverage where it is missing, such as repositories without lockfiles. Track inactive repositories and unused images that still have findings. When the quarterly cycle is in a steady state, take on traditional DevOps work: CI/CD pipelines, Docker and ECS workloads, AWS infrastructure, observability, reliability, and deployment automation. Patching always comes first. As new security tools are introduced or swapped out, take steps necessary to integrate the application with the new tooling. Infrastructure related vulnerabilities including IaC (Infrastructure as Code) scanning, AWS infrastructure misconfigurations, and host-based vulnerabilities on the cloud. Required qualifications: 8+ years in DevOps, platform engineering, or a closely related role. Extensive experience with AWS, including ECR, ECS, EKS, and IAM. Experience building agents with Strands or LangChain. Experience implementing custom MCP servers with tools such as FastMCP. Experience building and hosting applications on Node.js. Extensive experience with Docker and with container orchestration on ECS, including building, hardening, and patching container images. Extensive experience implementing CI/CD pipelines with GitHub Actions. Extensive experience fixing supply-chain vulnerabilities in open-source packages. Experience implementing Static Application Security Testing (SAST). Experience building automated test pipelines for unit and integration testing. Clear writing, and good judgment about production risk when automating changes. Certifications: Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD) preferred Salary/Rate: $60-$75/HR (depends on experience level). This is a contract position with candidates expected to work 40 hours/ week.

Requirements

Must-haves

Design and develop a Node.js agentic application on AWS AgentCore using Strands or LangChain, that integrates with existing security tooling MCPs, Docker build workflows, and Amazon ECR.
Build custom MCP servers with FastMCP so the agent can use approved tools against Aikido, ECR, GitHub, and the build system.
Build automated unit and integration test pipelines that validate the patches and every fix the agent proposes before review.
Pull in and prioritize open security findings from our security tooling and ECR by severity, exploitability, and ownership, starting with the repositories and images that carry the most critical and high risk.
Fix supply-chain vulnerabilities in open-source packages, including transitive dependencies, through lockfile updates, safe version upgrades, and configuration changes.
Implement and extend Static Application Security Testing (SAST), and handle SAST findings in the same monthly remediation process.
Update base images and packages.
Harden Docker files.
Rebuild and rescan images, then push them to ECR.
Roll the patched images out to ECS services through the normal release process.
Map vulnerable images to the ECS services and owners that use them and keep ECR clean with lifecycle policies and approved base images.
Run a quarterly cycle that addresses every in-scope finding. Each finding ends the quarter either fixed and deployed, accepted under a documented exception with a named owner, or assigned to the owning application team.
Restore scan coverage where it is missing, such as repositories without lockfiles. Track inactive repositories and unused images that still have findings.
As new security tools are introduced or swapped out, take steps necessary to integrate the application with the new tooling.
Infrastructure related vulnerabilities including IaC (Infrastructure as Code) scanning, AWS infrastructure misconfigurations, and host-based vulnerabilities on the cloud.
8+ years in DevOps, platform engineering, or a closely related role.
Extensive experience with AWS, including ECR, ECS, EKS, and IAM.
Experience building agents with Strands or LangChain.
Experience implementing custom MCP servers with tools such as FastMCP.
Experience building and hosting applications on Node.js.
Extensive experience with Docker and with container orchestration on ECS, including building, hardening, and patching container images.
Extensive experience implementing CI/CD pipelines with GitHub Actions.
Extensive experience fixing supply-chain vulnerabilities in open-source packages.

Nice-to-haves

Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD) preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

dockerawsnode.jsci/cdkubernetes

Platform: careers-page
Effort: medium