Overview

We are seeking an experienced
AWS Engineer
with strong architectural and hands-on engineering expertise to help design, build, and deploy a mirrored AWS environment based on our current production ecosystem. This role involves standing up a new AWS landing zone, implementing secure and scalable infrastructure, and enabling automated deployments through best-in-class IaC and DevOps practices.

This is a highly technical, onsite role requiring close collaboration with internal engineering, security, and operations teams to ensure all cloud services, policies, and configurations align with enterprise standards.

• • 
    AWS Services Architecture
  • 
    Control Tower
  • 
    AWS Config
  • 
    IAM Policies (SCP, IDC, Identity)
  • 
    CloudFormation
  • 
    AWS networking and VPC configuration
  • 
    Dev/Ops skills to deploy and manage a new AWS network
  • 
    Terraform/IaC skills
  • 
    Python coding skills

Responsibilities

• 
  Architect and build a
  new AWS environment
  that mirrors the existing production deployment.

• 
  Develop and configure
  AWS Control Tower
  landing zones, guardrails, and multi-account governance.

• 
  Implement
  AWS Config
  , resource compliance rules, and continuous monitoring across the new environment.

• 
  Create, refine, and enforce
  IAM policies
  , including SCPs, identity permissions, and role-based access models.

• 
  Build infrastructure using
  CloudFormation
  and
  Terraform
  to ensure fully automated, repeatable deployments.

• 
  Design and configure
  AWS networking
  , including VPCs, subnets, routing, security groups, peering, transit gateways, and hybrid connectivity (if needed).

• 
  Support and enhance DevOps pipelines used to deploy, test, and manage the new AWS environment.

• 
  Write, maintain, and optimize
  Python scripts
  for automation, resource configuration, and operational tooling.

• 
  Collaborate with security, operations, and application teams to validate environment integrity and readiness.

• 
  Troubleshoot cloud infrastructure issues and implement cloud engineering best practices.

Required Skills & Experience

• 
  8-10+ years of hands-on AWS engineering experience
  in enterprise-scale environments.

• 
  Expertise in
  AWS architecture
  , multi-account environments, and secure cloud design.

• 
  Strong experience with
  Control Tower
  ,
  AWS Config
  , and centralized governance.

• 
  Deep understanding of
  IAM
  , SCPs, identity federation, and cloud security best practices.

• 
  Proficiency in
  CloudFormation
  and
  Terraform
  (IaC).

• 
  Advanced knowledge of
  AWS networking
  (VPC, routing, security groups, NACLs, Direct Connect, VPN).

• 
  Solid
  DevOps background
  , including CI/CD pipelines, automated deployments, and environment management.

• 
  Strong
  Python
  programming for automation and tooling.

• 
  Ability to work onsite, collaborate cross-functionally, and deliver quality infrastructure quickly.

Preferred Qualifications

• 
  AWS Certifications (Solutions Architect, DevOps Engineer, or Security Specialty)

• 
  Experience migrating or replicating enterprise cloud environments.

• 
  Knowledge of monitoring, observability, and logging tools (CloudWatch, OpenSearch, etc.).