DevOps Engineer – AWS & Infrastructure as Code

• Comfortable working in a collaborative, team-oriented environment
• Design and manage AWS infrastructure using Pulumi (or similar IaC tools), with a focus on scalability, maintainability, and automation.

• Write and maintain high-quality infrastructure and DevOps tooling code in Python or TypeScript.
• Collaborate with engineering teams to support CI/CD pipelines, release workflows, and environment management.
• Ensure infrastructure follows best practices for security, monitoring, cost efficiency, and disaster recovery.
• Perform root cause analysis and debugging for complex production issues across AWS infrastructure and application layers.
• Drive improvements in DevOps practices, documentation, and team workflows.

• 5+ years of experience in a DevOps, Cloud Engineering, or Infrastructure role, with demonstrated success managing and scaling production-grade systems on cloud platforms.
• Proven hands-on coding experience in Python or TypeScript, particularly in the context of infrastructure automation, cloud tooling, or platform engineering.
• Experience with Docker and/or Kubernetes.

• Solid experience with Pulumi (preferred) or equivalent IaC tools such as Terraform or CloudFormation, with a strong willingness to work primarily with Pulumi.
• Practical experience designing, deploying, and managing AWS Landing Zones, including multi-account strategies, security baselines, centralized logging, and governance models.
• Strong knowledge of CI/CD pipelines and automation workflows using tools such as GitHub Actions, GitLab CI, CircleCI, or similar.
• Deep understanding of core AWS services, including EC2, ECS, Lambda, VPC, IAM, RDS, CloudFront, S3, and Route 53.
• Experience with networking fundamentals in AWS: VPC design, subnets, routing tables, NAT gateways, security groups, NACLs etc.
• Strong grasp of IAM and security best practices: role and policy design, secrets management, least privilege enforcement, and cloud identity governance.
• Familiarity with observability tools (e.g., CloudWatch, Datadog, Prometheus, Grafana) for monitoring, logging, and incident response.
• Comfortable working in a fast-paced, collaborative team environment, with a high level of ownership, accountability, and adaptability.

• Familiarity with serverless architectures, microservices, or event-driven systems.
• Exposure to compliance frameworks (e.g., SOC2, ISO27001, etc.) and cloud governance.
• Experience with security and DevSecOps tools, such as Snyk, AWS Inspector, AWS GuardDuty, or Prisma Cloud.
• Familiarity with cost optimization strategies and tools for AWS resource usage.

• Full-time position, with a requirement to work from the office at least 3 days per week.
• Location: Israel, Herzliya

QUESTAR