Senior AWS Cloud Engineer

What you'll do

• Manage and secure AWS infrastructure across multiple accounts (commercial and GovCloud).
• Design and implement infrastructure-as-code using Terraform, including modules for IAM, networking, compute, and storage.
• Build and maintain an infrastructure inventory for all critical services and accounts.
• Implement change management processes for production infrastructure (source control, review, monitoring).
• Respond to and remediate infrastructure incidents; participate in postmortem reviews.
• Configure and maintain monitoring, alerting, and observability for cloud services.
• Support security compliance initiatives (GuardDuty, CloudTrail, Panther SIEM, CrowdStrike integration).
• Collaborate with Cybersecurity on vulnerability management, patching, and asset tagging.
• Manage cost optimization across AWS accounts, including reserved instances, savings plans, and storage tiering.
• Document infrastructure architecture, runbooks, and operational procedures.

Qualifications

• 3+ years of professional experience managing AWS infrastructure.
• Strong Terraform experience (modules, state management, multi-account patterns).
• Experience with AWS IAM, VPC networking, S3, EC2, EKS, and CloudWatch.
• Understanding of networking concepts: VPN, Transit Gateway, DNS, security groups.
• Incident response experience; ability to troubleshoot across application, infrastructure, and network layers.
• Strong documentation and communication skills.

Preferred Qualifications

• Experience with AWS GovCloud or FedRAMP compliance environments.
• Experience with EKS cluster management (managed node groups, add-ons).
• Experience with CI/CD pipeline infrastructure (GitLab CI, runners, container registries).
• Experience with infrastructure monitoring and alerting (Prometheus, Grafana, CloudWatch, or equivalent).
• Linux systems administration proficiency.
• Experience with SIEM platforms (Panther, Splunk, or equivalent).
• Experience with SSO/SAML integration (AWS IAM Identity Center, Entra ID).
• Familiarity with cost management tools (AWS Cost Explorer, budgets, FinOps practices).
• Security certifications (AWS Security Specialty, CompTIA Security+, or equivalent).