Key skills
PythonShellBashAWSTerraformJenkinsGitHub ActionsEC2LambdaS3RDSRoute53IAMCloudWatchAPI GatewayIdentity ManagementGitGitHubLoad BalancingServiceNowCI/CDChange ManagementCommunicationCloud Security
About this role
TOP SKILLS:
Must Have
- AWS VPC architecture and network design patterns (multi-CIDR VPCs, subnets, route tables, security groups, NACLs)
- Cloud security controls: encryption, network isolation, identity management, policy enforcement
- Elastic Load Balancing (ALB, NLB) — listener rules, target groups, TLS termination
- Linux/macOS command-line proficiency
- NAT Gateway, VPC endpoints (interface and gateway), and AWS PrivateLink configuration
- Proficiency in Python, Bash/Shell scripting
- Route53 DNS architecture (private hosted zones, resolver rules, hybrid DNS)
- Transit Gateway design, attachments, route table propagation, and cross-account connectivity
- Understanding of TCP/IP, DNS, TLS/SSL, and network troubleshooting (flow logs, packet captures, traceroute)
Nice To Have
5 – 10 years of hands-on experience in cloud infrastructure engineering (AWS-focused)
· Demonstrated experience with Terraform (HCL) and IaC lifecycle management
· Deep working knowledge of AWS core services: VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, ELB (ALB/NLB), Transit Gateway
· Experience operating multi-account AWS environments using AWS Organizations and SCPs
· Proficiency in IAM policy design, cross-account access patterns, and least-privilege principles
· Experience with CI/CD pipelines (Terraform Cloud, Jenkins, GitHub Actions, or equivalent)
· Experience with Git-based workflows (branching strategies, pull requests, code reviews) in GitHub Enterprise or similar
· Experience working in regulated or enterprise environments with formal change management (ServiceNow or equivalent ITSM)
· Strong troubleshooting and problem-solving skills for complex, multi-account AWS environments
· Excellent written and verbal communication skills; ability to produce clear technical documentation
Work Environment
· Remote-first with preference for candidates in the Metro Detroit, Michigan area
· Standard business hours with participation in an on-call rotation