Senior AWS Cloud Engineer

Job Description

Senior AWS Cloud Engineer

\n

Location: Plano, TX or Charlotte, NC

\n

Work Arrangement: Hybrid – minimum 3 days onsite per week

\n

Duration: 12–18 months

\n

Employment Type: W2 Contract

\n

\n

Job Summary

\n

The Senior Cloud Engineer / AWS Architect will design and implement secure, scalable, highly available AWS solutions within a large enterprise environment.

\n

The role requires a very senior cloud engineering background (8–10+ years) with strong hands-on experience across AWS architecture, AWS database services, Terraform/Terraform Enterprise, IAM, networking, and cloud security.

\n

Recent and relevant experience with Amazon RDS, Aurora, and PostgreSQL is particularly important. The candidate should be able to demonstrate that this database experience has been part of their recent hands-on work , rather than older experience listed on a resume.

\n

The successful candidate will design end-to-end AWS database solutions using Infrastructure as Code , build reusable Terraform modules, establish secure IAM architectures, and support enterprise cloud automation and deployment patterns.

\n

Key Responsibilities

\n

\n
• Design and implement end-to-end AWS cloud solutions within a large enterprise environment.
\n
• Design and implement AWS database solutions using Infrastructure as Code.
\n
• Provide hands-on architecture and engineering expertise for:
\n
• Amazon RDS
\n
• Amazon Aurora
\n
• PostgreSQL
\n
• Ensure AWS database solutions meet enterprise requirements for high availability, disaster recovery, performance, security, and scalability .
\n
• Build reusable Terraform modules and establish standardized Infrastructure as Code patterns.
\n
• Manage Terraform state, workspaces, remote backends, and environment promotion patterns.
\n
• Design and manage Terraform Enterprise (TFE) workspaces, variables, VCS-driven workflows, and run governance.
\n
• Implement Terraform policy and governance capabilities, including Sentinel/OPA where applicable.
\n
• Develop and support CI/CD processes for Terraform deployments.
\n
• Design and implement AWS IAM solutions using least-privilege principles.
\n
• Develop IAM roles and policies, permission boundaries, SCPs, cross-account access, and federation/SSO integrations.
\n
• Design secure AWS networking architectures, including VPCs, subnets, routing, Transit Gateway, VPC endpoints/PrivateLink, security groups, NACLs, DNS, and hybrid connectivity.
\n
• Apply enterprise cloud security and compliance practices.
\n
• Work with services and capabilities including KMS, Secrets Manager, Parameter Store, CloudTrail, and CloudWatch.
\n
• Develop solutions that align with enterprise security, architecture, and governance standards.
\n
• Collaborate with enterprise technical teams and stakeholders to define and implement cloud solutions.
\n
• Support cloud automation and configuration management using Ansible where applicable.
\n
• Provide technical guidance and contribute to architecture and engineering standards.
\n

\n

Required Qualifications / Must Haves

\n

Senior-Level Cloud Engineering

\n

\n
• 8–10+ years of professional experience is required.
\n
• Strong Cloud Engineering background as the primary skillset.
\n
• Strong AWS cloud engineering and architecture experience.
\n
• Demonstrated experience working in large enterprise environments .
\n
• Strong project tenure and a history of successfully delivering projects through completion.
\n
• Strong communication and interpersonal skills.
\n

\n

AWS Database Experience

\n

Recent, relevant, hands-on database experience is critical.

\n

\n
• Strong hands-on experience with Amazon RDS .
\n
• Strong hands-on experience with Amazon Aurora .
\n
• Strong hands-on experience with PostgreSQL .
\n
• Candidates should have meaningful recent experience with these database technologies.
\n
• Experience designing database architectures for high availability, disaster recovery, performance, scalability, and cost optimization.
\n

\n

Terraform

\n

\n
• Extensive hands-on Terraform experience.
\n
• Approximately 7+ years of Terraform experience preferred.
\n
• Experience building reusable Terraform Infrastructure as Code modules.
\n
• Strong understanding of:
\n
• Terraform state
\n
• Workspaces
\n
• Remote backends
\n
• Environment promotion
\n
• Module development
\n
• Strong Terraform Enterprise (TFE) experience.
\n
• Experience with TFE workspace design, variable management, VCS-driven workflows, and run governance.
\n
• Experience with policy-as-code such as Sentinel/OPA where applicable.
\n

\n

IAM & Security

\n

IAM and security are major components of this role.

\n

\n
• Strong hands-on AWS IAM experience.
\n
• Experience designing least-privilege access models.
\n
• IAM roles and policies.
\n
• Permission boundaries.
\n
• Service Control Policies (SCPs).
\n
• Cross-account access.
\n
• Federation / SSO.
\n
• Strong AWS security mindset.
\n
• Experience with encryption, secrets management, auditability, and enterprise security controls.
\n
• Experience with AWS security services including KMS, Secrets Manager, Parameter Store, and CloudTrail.
\n

\n

AWS Architecture & Networking

\n

\n
• Strong AWS architecture experience across secure, scalable, and highly available environments.
\n
• Experience with multi-account and/or multi-region AWS environments.
\n
• Strong AWS networking knowledge, including:
\n
• VPC
\n
• Subnets
\n
• Route Tables
\n
• NAT / Internet Gateway
\n
• Transit Gateway
\n
• VPC Endpoints / PrivateLink
\n
• Security Groups / NACLs
\n
• Route 53 / DNS
\n
• VPN / Direct Connect
\n

\n

Azure

\n

\n
• Azure cloud experience is preferred.
\n
• Candidates with broader multi-cloud enterprise experience are valued.
\n

\n

Preferred / Nice-to-Have Skills

\n

\n
• CI/CD experience.
\n
• Bitbucket / Bitbucket Pipelines.
\n
• Jenkins.
\n
• XLR.
\n
• AWS CodePipeline.
\n
• Shell scripting.
\n
• Ansible / Ansible Playbooks.
\n
• Additional Terraform Enterprise governance experience.
\n
• Multi-cloud experience, including Azure.
\n
• Prior banking or financial-services experience.
\n

\n