About the role
Hands-on engineering role delivering OpenTelemetry (ADOT) instrumentation across a large multi-account AWS estate - Lambda, EC2 fleets, and ECS/Fargate - exporting to AWS X-Ray for security analytics. You will implement the architecture, own the IaC, and migrate any legacy X-Ray SDK/Daemon instrumentation to OpenTelemetry ahead of AWS's end-of-support timeline.
Responsibilities
- Deploy version-pinned ADOT Lambda layers; roll out ADOT Collector as a systemd agent via SSM State Manager; build ECS sidecar task patterns
- Implement cross-account IAM roles and X-Ray resource policies, KMS customer-managed keys, EventBridge cross-account event buses, and Kinesis ingestion
- Configure X-Ray Remote Sampler and Collector tail-sampling; map OTel attributes to indexed X-Ray annotations
- Migrate aws-xray-sdk code and X-Ray Daemon deployments to OpenTelemetry equivalents
- Deliver all infrastructure via peer-reviewed CDK (TypeScript) or Terraform pull requests
- Validate W3C trace-context propagation across Transit Gateway, load balancer, and WAF boundaries
Essential criteria
- 5+ years AWS engineering (security-focused preferred)
- Production OpenTelemetry experience (SDK and Collector)
- Strong cross-account IAM; CDK or Terraform; SSM fleet management
- Proficiency in at least two of Python, Node.js, Java, .NET, Go
- Full Australian work rights
Desirable
- ADOT-specific experience;
- X-Ray sampling rule design;
- ECS/Fargate networking;
- KMS key-policy design;
- Kinesis/EventBridge architectures
Application Question(s):
- Are you located in Sydney NSW?
Work Authorisation:
Work Location: Hybrid remote in North Sydney NSW 2060
