• Acknowledge vulnerability notifications within 24 hours / next business day, triaging into the appropriate SLA response tier (High: 30 days, Medium: 180 days, Low: 360 days) • Remediate identified system vulnerabilities on a weekly release cadence, including modification, testing, and installation of fixes across all instances; document via release notes, installation guides, and user guides • Perform security assessments and vulnerability scans using AWS Inspector, AWS Security Hub, Twistlock, or similar tools • Maintain trusted base images and automate dependency updates (e.g., Renovate Bot); execute container scans in CI/CD pipelines • Audit and inventory non-Terraformed legacy resources, systematically remediating configuration drift into managed code • Configure and maintain network boundaries: VPC subnets, security groups, Network ACLs, firewalls, VPN configurations, and route paths • Maintain development environment readiness: Terraform updates, git repo builds, key/credential validation, and log analysis for AppDev teams • Coordinate cross-team remediation schedules and story prioritization with AppDev workstreams; participate in on-call rotations supporting Tier 2/3 incident response

• Acknowledge vulnerability notifications within 24 hours / next business day, triaging into the appropriate SLA response tier (High: 30 days, Medium: 180 days, Low: 360 days) • Remediate identified system vulnerabilities on a weekly release cadence, including modification, testing, and installation of fixes across all instances; document via release notes, installation guides, and user guides • Perform security assessments and vulnerability scans using AWS Inspector, AWS Security Hub, Twistlock, or similar tools • Maintain trusted base images and automate dependency updates (e.g., Renovate Bot); execute container scans in CI/CD pipelines • Audit and inventory non-Terraformed legacy resources, systematically remediating configuration drift into managed code • Configure and maintain network boundaries: VPC subnets, security groups, Network ACLs, firewalls, VPN configurations, and route paths • Maintain development environment readiness: Terraform updates, git repo builds, key/credential validation, and log analysis for AppDev teams • Coordinate cross-team remediation schedules and story prioritization with AppDev workstreams; participate in on-call rotations supporting Tier 2/3 incident response

• DevOps Engineer III serves as an emerging individual contributor within a team, expanding your leadership, guidance, and mentoring skills. • With the support and guidance of leadership, you will be responsible for supporting the goal of meeting scope, schedule, and delivery requirements. • You will interact with stakeholders and utilize influential skills to drive improvements in DevOps processes and practices. • Manage blue/green and linear application rollouts with automated rollback to ensure zero-downtime production deployments • Build and maintain cost-optimization scripts using AWS Compute Optimizer and Cost Explorer to flag and clean up idle resources and orphaned volumes • Validate data encryption controls at rest (KMS) and in transit (TLS) across databases and cloud storage • Build and maintain authentication and access-control infrastructure supporting deployments, applying IAM least-privilege policies • Expand Terraform/IaC coverage across AWS services including EC2, S3, RDS, VPC, Lambda, and IAM • Support the observability/SRE lead during disaster recovery failover exercises; execute and document DR testing and maintain runbook accuracy • Provide deployment support to AppDev teams; maintain deployment runbooks as part of the Definition of Done • Participate in on-call and production triage rotations, supporting Tier 2/3 incident response

• DevOps Engineer III serves as an emerging individual contributor within a team, expanding your leadership, guidance, and mentoring skills. • You will be responsible for supporting the goal of meeting scope, schedule, and delivery requirements. • You will interact with stakeholders and utilize influential skills to drive improvements in DevOps processes and practices. • Manage blue/green and linear application rollouts with automated rollback to ensure zero-downtime production deployments. • Build and maintain cost-optimization scripts using AWS Compute Optimizer and Cost Explorer to flag and clean up idle resources and orphaned volumes. • Validate data encryption controls at rest (KMS) and in transit (TLS) across databases and cloud storage. • Build and maintain authentication and access-control infrastructure supporting deployments, applying IAM least-privilege policies. • Expand Terraform/IaC coverage across AWS services including EC2, S3, RDS, VPC, Lambda, and IAM. • Support the observability/SRE lead during disaster recovery failover exercises; execute and document DR testing and maintain runbook accuracy. • Provide deployment support to AppDev teams; maintain deployment runbooks as part of the Definition of Done. • Participate in on-call and production triage rotations, supporting Tier 2/3 incident response.