Senior AWS Cloud Engineer

Designs, manages, and secures AWS cloud infrastructure across multi-account environments using Terraform for autonomous vehicle platforms. Requires 3+ years AWS experience, strong IaC skills, and security focus; GovCloud/FedRAMP preferred.

About the job

What you'll do

Manage and secure AWS infrastructure across multiple accounts (commercial and GovCloud).
Design and implement infrastructure-as-code using Terraform, including modules for IAM, networking, compute, and storage.
Build and maintain an infrastructure inventory for all critical services and accounts.
Implement change management processes for production infrastructure (source control, review, monitoring).
Respond to and remediate infrastructure incidents; participate in postmortem reviews.
Configure and maintain monitoring, alerting, and observability for cloud services.
Support security compliance initiatives (GuardDuty, CloudTrail, Panther SIEM, CrowdStrike integration).
Collaborate with Cybersecurity on vulnerability management, patching, and asset tagging.
Manage cost optimization across AWS accounts, including reserved instances, savings plans, and storage tiering.
Document infrastructure architecture, runbooks, and operational procedures.

Qualifications

3+ years of professional experience managing AWS infrastructure.
Strong Terraform experience (modules, state management, multi-account patterns).
Experience with AWS IAM, VPC networking, S3, EC2, EKS, and CloudWatch.
Understanding of networking concepts: VPN, Transit Gateway, DNS, security groups.
Incident response experience; ability to troubleshoot across application, infrastructure, and network layers.
Strong documentation and communication skills.

Preferred Qualifications

Experience with AWS GovCloud or FedRAMP compliance environments.
Experience with EKS cluster management (managed node groups, add-ons).
Experience with CI/CD pipeline infrastructure (GitLab CI, runners, container registries).
Experience with infrastructure monitoring and alerting (Prometheus, Grafana, CloudWatch, or equivalent).
Linux systems administration proficiency.
Experience with SIEM platforms (Panther, Splunk, or equivalent).
Experience with SSO/SAML integration (AWS IAM Identity Center, Entra ID).
Familiarity with cost management tools (AWS Cost Explorer, budgets, FinOps practices).
Security certifications (AWS Security Specialty, CompTIA Security+, or equivalent).