Sr. AWS Cloud Engineer

Position Overview:

We are seeking a Senior AWS Cloud Engineer to join our cloud operations team and take ownership of critical infrastructure reliability, governance, and automation initiatives. In this role, you will manage and optimize a broad AWS estate spanning EC2 fleet health, backup integrity, patch management, and resource lifecycle governance using tools such as Terraform, AWS CDK, SSM, and Cloud Custodian. You will collaborate closely with DevOps, security, and application teams to enforce cloud best practices, drive cost efficiency, and maintain operational excellence across multi-account environments. The ideal candidate brings deep hands-on AWS expertise, strong Python and IaC skills, and a proactive mindset for identifying and resolving infrastructure challenges in a fast-paced Agile delivery environment

.
Key Responsibilitie

• s:
  Cloud Infrastructure Design & Provisioning: Design, deploy, and maintain scalable, highly available, and fault-tolerant AWS infrastructure using Infrastructure-as-Code (IaC) tools including Terraform and AWS CDK, ensuring all resources adhere to organizational standards, tagging conventions, and cost governance polici
• es.Backup, Disaster Recovery & Data Integrity Management: Oversee end-to-end backup strategies using AWS Backup, including monitoring job completion, investigating and remediating VSS/snapshot inconsistencies, validating restore points, and ensuring RPO/RTO objectives are consistently met across all critical workloa
• ds.Patch Management & Systems Manager (SSM) Governance: Maintain and govern the AWS Systems Manager codebase including runbook versioning, patch baseline testing, document lifecycle management, and multi-account SSM automation hygiene to ensure compliance and operational currency across the fle
• et.Cloud Cost Optimization & Resource Lifecycle Management: Drive continuous cloud cost optimization through Cloud Custodian policy authoring, dry-run validation, and enforcement — including automated cleanup of orphaned resources such as unattached EBS volumes, unused Elastic IPs, stale AMIs, and idle EC2 instanc
• es.EC2 Fleet Health & Observability: Monitor the health and performance of large-scale EC2 fleets using Amazon CloudWatch, including dashboard maintenance, alarm triage, metric anomaly investigation, and coordination with application teams to resolve infrastructure-level incidents prompt
• ly.Security, Compliance & Policy Enforcement: Partner with security and compliance teams to enforce guardrails through AWS Config rules, Service Control Policies (SCPs), and Cloud Custodian policies — ensuring continuous compliance with internal standards, CIS benchmarks, and regulatory frameworks such as SOC 2, HIPAA, or PCI-DSS as applicab

le.
Required Skills and Qualificati

• ons:
  AWS Backup monitoring and VSS/snapshot inconsistency remedi
• ationSSM codebase governance — runbook currency, patch baseline testing, document versioning across acc
• ountsCloud Custodian job oversight & policy execution, dry run validation, orphaned resource cleanup across EBS, AMIs, unused IP addresses, detached vo
• lumesEC2 fleet health monitoring and CloudWatch alert t
• riageCDK and Python pipeline support and package dependency manag
• ementTerraform state and module mainte
• nanceActive Directory health monitoring and user lifecycle su
• pportGeneral sprint board task exec