AWS Cloud Engineer

About:

• AWS Cloud Engineer to own, secure, and modernize our AWS infrastructure across numerous tenant accounts.
• You will lead the transition to an AWS Security Reference Architecture (SRA)-aligned, multi-account environment, harden our cloud security posture, and support enterprise security and compliance initiatives such as ISO 27001:2022.
• This is a hands-on, individual-contributor ownership role: you will be the technical authority for our AWS estate – designing, building, automating, and operating cloud infrastructure – while partnering with Systems Engineering, InfoSec, and IT to keep our environments secure, resilient, well-documented, and cost-effective.

Essential duties and responsibilities:

• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.
• The requirements listed below are representative of the knowledge, skill, and/or ability required.
• Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. Other duties may be assigned.

Qualifications:

• 5+ years of hands-on experience designing, building, and operating production AWS environments.
• Current AWS Certified Security – Specialty certification (strongly preferred); Solutions Architect – Professional and/or SysOps Administrator certifications preferred.
• Proven track record owning AWS infrastructure at scale, ideally across a multi-account or multi-tenant organization.
• Hands-on experience with AWS Organizations, Control Tower, and building or operating an SRA-aligned or well-architected landing zone.
• Strong experience with AWS security services (IAM Identity Center, GuardDuty, Security Hub, Config, CloudTrail, KMS, WAF) and least-privilege design.
• Experience supporting compliance frameworks such as ISO 27001:2022, SOC 2, or similar, including implementing and evidencing controls.
• Proficiency with infrastructure as code (Terraform, CloudFormation, or CDK) and CI/CD automation.
• Strong scripting skills (e.g., Python, Bash, or PowerShell).
• Solid understanding of cloud networking, encryption, and identity and access management.
• Strong documentation and communication skills, with the ability to work effectively with both technical and non-technical stakeholders.

Critical Qualities:

• Strong sense of ownership — accountable for the security, reliability, and quality of the AWS estate end to end.
• Security-first mindset and sound judgment around risk, least privilege, and compliance.
• Ability to balance modernization and automation with operational stability.
• Clear thinking and composure during incidents and outages.
• Proactive approach to hardening, monitoring, and continuous improvement.
• Excellent documentation habits.
• Strong organizational skills and attention to detail.
• Effective collaboration across Systems Engineering, InfoSec, and IT.