Senior AWS Cloud Engineer (IaC/Networking)

Job Description

Description

Remote\n
\n
\nOur client seeks an experienced AWS Cloud Platform Engineer to support an enterprise AWS environment managing 100+ accounts, 250+ serverless functions, and a robust infrastructure-as-code ecosystem aligned to digital transformation and regulatory objectives. This hands-on role focuses on day-to-day platform operations, account lifecycle, VPC networking, security controls enforcement, and operational support within a regulated environment with strict change and compliance requirements.\n
\n
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $75.00 to $85.00/hr. w2\n
\n
Responsibilities

\n

\n
• Provision and manage AWS accounts and services, including decommissioning within AWS Organizations.

\n

• Perform VPC provisioning, upgrades, and configuration management using Terraform.

\n

• Manage Transit Gateway attachments, route table configurations, and cross-account connectivity.

\n

• Support compute infrastructure including EC2 fleet management, Auto Scaling Groups, and load balancers.

\n

• Fulfill infrastructure change requests through ITSM processes and formal change management.

\n

• Develop, maintain, and troubleshoot Terraform configurations for AWS provisioning.

\n

• Operate within Terraform Cloud workspaces with policy-as-code enforcement and contribute to internal modules and guardrails.

\n

• Implement and maintain SCPs, IAM policies, and least-privilege access models.

\n

• Enforce encryption and data protection standards across EBS, RDS, S3, and KMS.

\n

• Triage and remediate findings from CSPM tools, vulnerability scans, and drift detection.

\n

• Manage VPC endpoints, PrivateLink connectivity, and network security controls.

\n

• Monitor and respond to alarms, security findings, and AWS Config rule violations.

\n

• Support FinOps practices including budget monitoring, enforcement, and resource optimization.

\n

• Participate in an on-call rotation for cloud platform support.

\n

• Collaborate with application, security, and enterprise architecture stakeholders.

\n

• Maintain operational runbooks, SOPs, and technical documentation including troubleshooting procedures and customer guides.
  
  

\n

Experience Requirements

\n

\n
• 5 to 10 years of hands-on cloud infrastructure engineering with an AWS focus.

\n

• Demonstrated experience with Terraform and IaC lifecycle management.

\n

• Deep knowledge of AWS core services including VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, and ELB (ALB/NLB), plus Transit Gateway.

\n

• Experience operating multi-account AWS environments using AWS Organizations and SCPs.

\n

• Proficiency in IAM policy design, cross-account access patterns, and least-privilege principles.

\n

• Experience with CI/CD pipelines such as Terraform Cloud, Jenkins, or GitHub Actions.

\n

• Experience with Git-based workflows including branching strategies, pull requests, and code reviews.

\n

• Experience working in regulated or enterprise environments with formal change management such as ServiceNow.

\n

• Strong troubleshooting and problem-solving skills for complex multi-account AWS environments.

\n

• Effective written and verbal communication with ability to produce clear technical documentation.

\n

• Must-have technical skills: AWS VPC architecture and network design patterns, cloud security controls, Elastic Load Balancing, Linux or macOS command-line proficiency, NAT Gateway, VPC endpoints and PrivateLink, Python and Bash or Shell scripting, Route 53 DNS architecture, Transit Gateway design, and understanding of TCP/IP, DNS, TLS or SSL, and network troubleshooting.

\n

• Nice-to-have skills: AWS certifications, CSPM tools, policy-as-code frameworks, experience in financial services or regulated industries, containerization and serverless familiarity, HashiCorp Vault, FinOps and AWS cost optimization, and working knowledge of Golang.
  
  

\n

Education Requirements