AWS Cloud Engineer III

Experience: 12+ years

Must Have:

• AWS EC2 architecture including instance types, placement groups, and Auto Scaling Group lifecycle management
• Cloud security controls: encryption, network isolation, identity management, policy enforcement
• EBS volume management, encryption enforcement, and snapshot lifecycle
• EC2 Image Builder pipelines recipe configuration, component authoring, image testing, and cross-account AMI distribution
• Golden AMI lifecycle management: base image selection, CIS benchmark hardening, security agent integration (endpoint protection, vulnerability scanning), and automated image rotation/deprecation
• Infrastructure as Code principles and Terraform lifecycle management
• Launch template and Auto Scaling Group integration with AMI pipelines for fleet-wide image updates
• Linux/macOS command-line proficiency
• Proficiency in Python, Bash/Shell scripting
• Understanding of OS hardening standards (CIS Benchmarks), patch management, and image compliance

Nice To Have:

• AWS Certifications: Solutions Architect (Associate or Professional), SysOps Administrator, DevOps Engineer, Security Specialty, or equivalent cloud certifications
• Cloud Service Evaluation & Governance: Experience evaluating, securing, and onboarding new cloud services for enterprise adoption.
• Experience with CSPM tools (Prisma Cloud, AWS Config, or similar)
• Experience with policy-as-code frameworks (Sentinel or similar)
• Experience working in financial services or other highly regulated industries
• Familiarity with containerization (ECS, EKS, Docker) and serverless architectures
• Familiarity with HashiCorp Vault for secrets management and credential brokering
• FinOps / Cloud Cost Optimization: Experience with AWS Cost Explorer, Budgets, cost allocation tagging strategies, right-sizing, and Savings Plans
• Working knowledge of Go (Golang)

Duties and Responsibilities

Infrastructure Operations & Account Lifecycle

Infrastructure as Code (IaC)

Security & Compliance

Monitoring, Cost Management & Operational Support

optimization recommendations

Documentation & Knowledge Management

Minimum Knowledge, Skills, and Abilities Required

Required Experience (Must-Haves)

• 5 10 years of hands-on experience in cloud infrastructure engineering (AWS focused)
• Demonstrated experience with Terraform (HCL) and IaC lifecycle management
• Deep working knowledge of AWS core services: VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, ELB (ALB/NLB), Transit Gateway
• Experience operating multi-account AWS environments using AWS Organizations and SCPs
• Proficiency in IAM policy design, cross-account access patterns, and least-privilege principles
• Experience with CI/CD pipelines (Terraform Cloud, Jenkins, GitHub Actions, or equivalent)
• Experience with Git-based workflows (branching strategies, pull requests, code reviews) in GitHub Enterprise or similar
• Experience working in regulated or enterprise environments with formal change management (ServiceNow or equivalent ITSM)
• Strong troubleshooting and problem-solving skills for complex, multi-account AWS environments
• Excellent written and verbal communication skills; ability to produce clear technical documentation