Senior AWS Cloud Engineer (IaC/Networking)

Job Description

Description

Remote\n
\n
\nOur client seeks an experienced AWS Cloud Platform Engineer to support an enterprise AWS environment managing 100+ accounts, 250+ serverless functions, and a robust infrastructure-as-code ecosystem aligned to digital transformation and regulatory objectives. This hands-on role focuses on day-to-day platform operations, account lifecycle, VPC networking, security controls enforcement, and operational support within a regulated environment with strict change and compliance requirements.\n
\n
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $75.00 to $85.00/hr. w2\n
\n
Responsibilities

\n

\n
• Provision and manage AWS accounts and services, including decommissioning within AWS Organizations.
\n
• Perform VPC provisioning, upgrades, and configuration management using Terraform.
\n
• Manage Transit Gateway attachments, route table configurations, and cross-account connectivity.
\n
• Support compute infrastructure including EC2 fleet management, Auto Scaling Groups, and load balancers.
\n
• Fulfill infrastructure change requests through ITSM processes and formal change management.
\n
• Develop, maintain, and troubleshoot Terraform configurations for AWS provisioning.
\n
• Operate within Terraform Cloud workspaces with policy-as-code enforcement and contribute to internal modules and guardrails.
\n
• Implement and maintain SCPs, IAM policies, and least-privilege access models.
\n
• Enforce encryption and data protection standards across EBS, RDS, S3, and KMS.
\n
• Triage and remediate findings from CSPM tools, vulnerability scans, and drift detection.
\n
• Manage VPC endpoints, PrivateLink connectivity, and network security controls.
\n
• Monitor and respond to alarms, security findings, and AWS Config rule violations.
\n
• Support FinOps practices including budget monitoring, enforcement, and resource optimization.
\n
• Participate in an on-call rotation for cloud platform support.
\n
• Collaborate with application, security, and enterprise architecture stakeholders.
\n
• Maintain operational runbooks, SOPs, and technical documentation including troubleshooting procedures and customer guides.

\n

Experience Requirements

\n

\n
• 5 to 10 years of hands-on cloud infrastructure engineering with an AWS focus.
\n
• Demonstrated experience with Terraform and IaC lifecycle management.
\n
• Deep knowledge of AWS core services including VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, and ELB (ALB/NLB), plus Transit Gateway.
\n
• Experience operating multi-account AWS environments using AWS Organizations and SCPs.
\n
• Proficiency in IAM policy design, cross-account access patterns, and least-privilege principles.
\n
• Experience with CI/CD pipelines such as Terraform Cloud, Jenkins, or GitHub Actions.
\n
• Experience with Git-based workflows including branching strategies, pull requests, and code reviews.
\n
• Experience working in regulated or enterprise environments with formal change management such as ServiceNow.
\n
• Strong troubleshooting and problem-solving skills for complex multi-account AWS environments.
\n
• Effective written and verbal communication with ability to produce clear technical documentation.
\n
• Must-have technical skills: AWS VPC architecture and network design patterns, cloud security controls, Elastic Load Balancing, Linux or macOS command-line proficiency, NAT Gateway, VPC endpoints and PrivateLink, Python and Bash or Shell scripting, Route 53 DNS architecture, Transit Gateway design, and understanding of TCP/IP, DNS, TLS or SSL, and network troubleshooting.
\n
• Nice-to-have skills: AWS certifications, CSPM tools, policy-as-code frameworks, experience in financial services or regulated industries, containerization and serverless familiarity, HashiCorp Vault, FinOps and AWS cost optimization, and working knowledge of Golang.

\n

Education Requirements