DevOps Engineer for Fire & Forget CI/CD + Governance + Continuity Setup

Project Overview:
We are looking for an Certified AWS DevOps Engineer to implement a secure, automated “Fire & Forget” DevOps system for our MERN-based event marketplace .The goal is to create a fully automated, self-governing, and low-maintenance DevOps ecosystem covering CI/CD, infrastructure security, and operational continuity, ensuring zero dependency on any individual developer after setup.

Scope of Work: You will deliver an end-to-end DevOps + Governance + Continuity setup including:

1. CI/CD Automation (GitHub Actions)

-Staging: Auto-deploy on every push
-Production: Manual deploy post PR approval
-Rollback capability for both frontend (React) and backend (Node.js)

2. Secure Secrets Management

-Use AWS Secrets Manager (runtime) + GitHub Secrets (build-time)
-Integrate AWS OIDC (no static keys)
-Provide single-command provisioning script (add-secret.sh) + documentation

3. AWS Infrastructure Hardening & Cost Optimization

-EC2 access via Session Manager only (no PEM/SSH)
-IAM least-privilege roles for staging and production
-Auto-stop rules for staging, snapshot backups, CloudWatch alerts

4. Governance & Continuity Layer (Knowledge Preservation)

-Protected branches with enforced CI checks & PR approvals
-Standardized PR and issue templates
-Auto-linting and Prettier integration
-Automated changelog and documentation updates
-GitHub Wiki + Onboarding & Runbook docs for founder and new devs
-Docker Compose setup for local environment replication
-Knowledge base and self-documenting workflows

5. Documentation & Training

-RUNBOOK.md, ONBOARDING.md, SECRETS_GUIDE.md, CONTRIBUTING.md
-45-min recorded walkthrough for future reference

Mandatory:

-Signed NDA before access.
-Prior experience with AWS IAM, GitHub Actions, OIDC, SSM, and CI/CD.
-Available for overlap in 11 AM – 7 PM IST working window.

Timeline: 1 Week