AWS Cloud Engineer

AWS Cloud Engineer

Position Type: Full-Time, Exempt.

Salary: $120,000 to $155,000 annually (DOE).

Location: San Juan Capistrano, CA (Onsite).

About the Company:
Ensign Services, Inc. ("ESI") is a subsidiary of The Ensign Group, Inc. whose affiliated entities are considered national leaders in the fast-growing post-acute care industry. ESI provides service and support to over 378 facilities in the long-term care continuum that employ over 55,000 employees.

ESI is known as the "Service Center" and provides the facilities and leaders it serves with "back-office" support in areas such as accounting, construction, compliance, human resources, information technology, learning and development, legal and risk management and recruiting. This structure allows the onsite leaders and caregivers to focus on day-to-day care and operational issues in their individual operations. What sets ESI apart from other companies is the quality of our most valuable resource - our people.

We take our core values of Celebration , Accountability , Passion for Learning , Love One Another , Intelligent Risk Taking , Customer Second , and Ownership ("CAPLICO") seriously. We want an individual in this role who will demonstrate these values through actions and words.


About the Opportunity:

We are seeking an experienced AWS Cloud Engineer to manage and optimize our AWS environment. This role will serve as the primary point of contact for all AWS-related activities, ensuring secure, scalable, and cost-effective cloud solutions. The ideal candidate will have strong expertise in AWS architecture, administration, and security best practices, along with proficiency in Python for automation and integration tasks.

Job Duties and Responsibilities include, but are not limited to:

• Cloud Architecture & Planning
  • Collaborate with teams to design AWS-based solutions tailored to project requirements.
  • Recommend appropriate AWS services for new initiatives and migrations.
• Administration & Operations
  • Manage AWS resources across multiple accounts, implementing automation where possible.
  • Deploy workloads to production environments following best practices.
  • Maintain organizational control policies to ensure compliance with security and governance standards.
• Security & Compliance
  • Configure and manage AWS security services (IAM, KMS, Security Hub, GuardDuty, etc.).
  • Enforce least-privilege principles and prevent overly permissive IAM roles or security groups.
  • Monitor and remediate security vulnerabilities across AWS accounts.
  • Implement centralized logging and auditing solutions for compliance.
• Support & Troubleshooting
  • Serve as the primary point of contact for AWS-related issues and inquiries.
  • Assist teams in troubleshooting development and production issues.
• Automation & Integration
  • Build integrations for AWS-based processes as necessary
  • Write Python scripts for automation, resource provisioning, and security enforcement.
  • Develop automated workflows for resource provisioning and security enforcement.
• Governance & Best Practices
  • Ensure adherence to organizational security controls and compliance frameworks.
  • Provide guidance and training to teams unfamiliar with AWS.

Preferred Qualifications:

• AWS Certified Solutions Architect - Associate or Professional, preferred.
• AWS Certified Security - Specialty, preferred.
• Strong experience in AWS architecture and administration across multi-account environments.
• Deep understanding of AWS security services and best practices.
• Proficiency in automation tools (CloudFormation, Terraform, or similar).
• Proficiency in Python for automation and integration tasks.
• Familiarity with monitoring and logging solutions (CloudWatch, AWS Config, etc.).
• Excellent troubleshooting and problem-solving skills.
• Strong communication and collaboration abilities.

Desired Skills:

• Experience with CI/CD pipelines and DevOps practices.
• Knowledge of cost optimization strategies in AWS.
• Familiarity with compliance frameworks (e.g., SOC 2, HIPAA, ISO 27001).

Additional Information:

• Pre-employment criminal background screening required.

What We Offer:
We are committed to providing a competitive benefits and compensation package which includes medical/dental/vision coverage, company-provided life insurance, 401(k) with company match, and sick/vacation plans. Additionally, enjoy access to our fully equipped onsite gym (San Juan Capistrano office location). We also believe in supporting our employee's professional growth and development through our Learning Management System as well as training sessions and seminars. Take a look at these benefits (and more!) at


Ensign Services, Inc. is an equal opportunity employer. If you need assistance or accommodation during the application process, please contact us at View phone number on click.appcast.io.


Job ID: 1258