Job Description:

Exelixis is seeking a Senior DevOps - AWS Technical Lead to lead the design, deployment, and management of AWS cloud infrastructure. The ideal candidate will have extensive experience in AWS services, Terraform, and DevOps best practices, capable of building and maintaining secure, scalable, and efficient cloud environments. This is a strictly onsite role located in Alameda, CA, and requires local candidates only.

Responsibilities:

• Engage with stakeholders to design and implement secure, scalable AWS cloud environments.
• Create design documents and runbooks for new tools and services as required.
• Use Terraform to build cloud environments, managing the deployment of both test and production environments.
• Monitor and optimize cloud deployments, ensuring continuous updates to stakeholders.
• Implement Terraform modules, Terraform functions, and manage custom Terraform backends.
• Leverage tools like TFSec, GitLeaks, and Semgrep for code quality assurance and to prevent hard-coded keys.
• Use Atlantis to deploy infrastructure through Terraform pull requests.
• Work with GitHub Actions and OIDC to automate infrastructure tasks like application deployment and S3 content updates.

Primary Skills (Must-Have):

• AWS Services:
  • S3: Advanced usage, lifecycle policies, bucket policies, and expiration policies.
  • Lambda: For gathering metrics from AWS services (e.g., S3, IAM).
  • OpenSearch
  • AWS Shield Advanced
  • ECS, ECR: Deploy and configure containers.
  • SSM Setup and Configuration
  • SageMaker: Setup and configuration.
  • AWS Workspaces: Setup and configuration.
  • EC2, Auto Scaling Groups (ASG): Custom AMI creation with agents like SentinelOne and SCCM.
  • SES, SQS, SNS: Email, messaging, and notification services.
  • AWS Control Tower
  • AWS Cognito: Identity and access management.
  • AWS AppFlow
  • Systems Manager
  • AWS Trusted Advisor
  • QuickSight: AWS Business Intelligence service.
  • Route53: Domain hosting and management.
  • Secrets Manager: Securely rotate access keys for services such as JIRA or RDS.
• Terraform:
  • Advanced knowledge in using Terraform modules, functions, and managing custom backends.
  • Familiarity with code quality tools like TFSec, GitLeaks, and Semgrep.
  • Experience with Atlantis for deploying infrastructure through Terraform pull requests.
• Automation:
  • Use of GitHub Actions and OIDC for automating infrastructure tasks.

Preferred Skills (Added Advantage):

• Experience with AWS Control Tower and AWS Cognito for managing secure multi-account environments.
• Familiarity with Atlantis for streamlined infrastructure deployment via pull requests.
• Experience with AWS Shield Advanced for advanced threat protection.

Conditions:

• Onsite role only; remote work is not available.
• Local candidates only; must be able to work onsite in Alameda, CA.