About the role

Hands-on engineering role delivering OpenTelemetry (ADOT) instrumentation across a large multi-account AWS estate - Lambda, EC2 fleets, and ECS/Fargate - exporting to AWS X-Ray for security analytics. You will implement the architecture, own the IaC, and migrate any legacy X-Ray SDK/Daemon instrumentation to OpenTelemetry ahead of AWS's end-of-support timeline.

Responsibilities

- Deploy version-pinned ADOT Lambda layers; roll out ADOT Collector as a systemd agent via SSM State Manager; build ECS sidecar task patterns
- Implement cross-account IAM roles and X-Ray resource policies, KMS customer-managed keys, EventBridge cross-account event buses, and Kinesis ingestion
- Configure X-Ray Remote Sampler and Collector tail-sampling; map OTel attributes to indexed X-Ray annotations
- Migrate aws-xray-sdk code and X-Ray Daemon deployments to OpenTelemetry equivalents
- Deliver all infrastructure via peer-reviewed CDK (TypeScript)



or Terraform pull requests
- Validate W3C trace-context propagation across Transit Gateway, load balancer, and WAF boundaries

Essential criteria

- 5+ years AWS engineering (security-focused preferred)
- Production OpenTelemetry experience (SDK and Collector)
- Solid cross-account IAM; CDK or Terraform; SSM fleet management
- Proficiency in at least two of Python, Node.js, Java, .NET, Go
- Full Australian work rights

Desirable

- ADOT-specific experience;
- X-Ray sampling rule design;
- ECS/Fargate networking;
- KMS key-policy design;
- Kinesis/EventBridge architectures

Application Question(s):

- Are you located in Sydney NSW?

Work Authorisation:

- Australia (Required)

Work Location: Hybrid remote in North Sydney NSW 2060

📌 Senior Cloud Security Engineer - AWS, OpenTelemetry/ADOT (North Sydney)
🏢 CSECNS
📍 North Sydney