AWS Cloud, IAM, CDK & DevOps Engineer

Project: Market Analysis IT Standardization & Western Market Expansion

Cloud Platform: AWS



Core Focus: IAM & CDK



Delivery Focus: DevOps & Operations

Project Overview

The Power Systems Optimizer (PSO) platform supports energy market analysis, forecasting, optimization, scenario evaluation, and operational decision-making.

The PSO Interface IT Enablement initiative focuses on establishing a scalable, secure, automated, and supportable cloud foundation for Market Analysis platform growth and Western market expansion.

Position Summary

The AWS Cloud, IAM, CDK & DevOps Engineer will design, implement, automate, and support the AWS cloud foundation for the PSO platform.

The role will own AWS environment architecture, IAM and identity controls, reusable AWS CDK infrastructure, CI/CD enablement, observability, resilience, security, and production readiness across development, test, and production environments.

Key Responsibilities

AWS Cloud Infrastructure & Architecture

• Design, implement, and support secure AWS infrastructure across development, test, and production environments.
• Implement cloud networking, secrets management, encryption, logging, monitoring, alerting, backup, recovery, and resiliency controls.
• Support enterprise AWS environments and production operations.
• Create cloud architecture diagrams, implementation plans, technical standards, test evidence, and production-readiness documentation.

Identity & Access Management (IAM)

• Define and manage IAM roles, policies, service accounts, identity federation, permission boundaries, and least-privilege access controls.
• Implement and support Amazon Cognito authentication and application integration patterns where required.
• Establish IAM, authentication, authorization, and access-control standards.

Infrastructure as Code (AWS CDK)

• Develop and maintain reusable infrastructure-as-code constructs, stacks, and deployment patterns using AWS CDK.
• Define reusable CDK constructs, deployment standards, account structures, and environment guardrails.
• Automate environment provisioning, configuration, validation, promotion, rollback, and release processes.

DevOps & CI/CD Automation

• Build and support CI/CD pipelines for infrastructure and application deployments through approved DevOps and GitHub workflows.
• Automate infrastructure deployment and release processes.
• Support Git-based deployment workflows and related DevOps tooling.
• Implement and maintain automated infrastructure provisioning and deployment workflows.

Operations, Security & Reliability

• Implement monitoring, logging, alerting, backup, recovery, and resiliency procedures.
• Support containerized or serverless AWS workloads and automated operational monitoring.
• Partner with developers, architects, security teams, and vendors to resolve integration, access, deployment, and performance issues.
• Provide troubleshooting, knowledge transfer, operating procedures, support runbooks, and post-deployment stabilization support.
• Ensure security, operational readiness, and production deployment requirements are addressed.

Required Qualifications

• Five or more years of hands-on AWS cloud engineering or DevOps experience.
• Strong experience with AWS IAM, authentication, authorization, identity federation, and least-privilege design.
• Hands-on experience developing and deploying infrastructure using AWS CDK.
• Experience building or supporting CI/CD pipelines and Git-based deployment workflows.
• Experience supporting enterprise AWS environments and production operations.
• Knowledge of AWS networking, secrets management, encryption, observability, backup, recovery, and resiliency.
• Experience with scripting or automation using Python, TypeScript, JavaScript, Bash, or comparable technologies.
• Strong documentation, troubleshooting, communication, and stakeholder collaboration skills.

Preferred Qualifications

• Experience with GitHub, GitHub Actions, AWS CodePipeline, AWS CodeBuild, or comparable DevOps tooling.
• Experience defining reusable CDK constructs, deployment standards, account structures, and environment guardrails.
• Experience supporting containerized or serverless AWS workloads and automated operational monitoring.
• Experience supporting energy trading, power market analytics, utility operations, renewable energy, or forecasting platforms.
• Familiarity with North American ISO/RTO markets, including ERCOT, PJM, MISO, SPP, CAISO, NYISO, or ISO-NE.
• Experience in regulated, cybersecurity-sensitive, or compliance-driven environments.
• Relevant AWS certification is a plus.

Expected Deliverables

• Documented AWS cloud, identity, CDK, and DevOps architecture.
• Configured development, test, and production cloud environments.
• Reusable AWS CDK constructs, stacks, and deployment templates.
• IAM, authentication, authorization, and access-control standards.
• CI/CD pipelines and automated infrastructure deployment workflows.
• Monitoring, logging, alerting, backup, recovery, and resiliency procedures.
• Security, operational readiness, and deployment evidence.
• Technical documentation, knowledge transfer, and support runbooks.

Role Focus

Secure AWS foundations, IAM governance, reusable AWS CDK automation, DevOps pipelines, operational resilience, and production readiness.