Senior AWS Cloud Engineer (Infrastructure/IaC)

Description: RemoteOur client is seeking an AWS Cloud Engineer III to operate and secure an enterprise AWS environment across multiple accounts. The role will manage account lifecycle processes, provision and maintain infrastructure with Terraform, enforce security controls and compliance, and support day-to-day operations including monitoring, cost governance, and on-call support. The engineer will collaborate with application, security, and architecture teams and document procedures and runbooks. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Provision and manage AWS accounts, services, and decommissioning within AWS Organizations. Perform VPC provisioning, upgrades, and configuration management using Terraform. Manage Transit Gateway attachments, route tables, and cross-account network connectivity. Support compute infrastructure including EC2 fleet management, Auto Scaling Groups, and load balancers. Execute infrastructure change requests through ITSM processes and formal change management. Develop, maintain, and troubleshoot Terraform configurations and modules. Operate within Terraform Cloud workspaces with policy-as-code enforcement. Manage Terraform state and plan/apply workflows across multiple AWS accounts. Implement and maintain SCPs, IAM policies, and least-privilege access. Enforce encryption and data protection for EBS, RDS, S3, and KMS.Triage and remediate findings from CSPM tools, vulnerability scanners, and drift detection. Manage VPC endpoints, Private Link, and network security controls. Monitor and respond to alarms, security findings, and AWS Config rule violations. Support FinOps practices for cost and budget monitoring and optimization. Participate in an on-call rotation for cloud platform support. Collaborate with application, security, and enterprise architecture stakeholders. Maintain runbooks, SOPs, and technical documentation. Document infrastructure decisions, configurations, and troubleshooting procedures. Experience Requirements5 to 10 years of hands-on cloud infrastructure engineering experience with emphasis on AWS.Proficiency with Terraform and IaC lifecycle management. Deep knowledge of AWS services: VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, and ELB including Transit Gateway. Experience operating multi-account environments with AWS Organizations and SCPs. IAM policy design with cross-account access and least-privilege principles. Experience with CI/CD pipelines such as Terraform Cloud, Jenkins, or GitHub Actions. Experience with Git-based workflows including branching, pull requests, and reviews. Background in regulated or enterprise environments with formal change management such as Service Now. Strong troubleshooting and problem-solving skills for complex multi-account environments. Clear written and verbal communication with ability to produce technical documentation. Must-have technical skills include AWS EC2 architecture, cloud security controls, EBS management, EC2 Image Builder, Golden AMI lifecycle, Terraform, launch templates with Auto Scaling Groups, Linux or macOS CLI, Python and Bash or Shell scripting, and understanding of CIS benchmarks, patch management, and image compliance. Nice-to-have skills include AWS certifications, CSPM tools, policy-as-code frameworks, experience in regulated industries, containerization and serverless familiarity, HashiCorp Vault, FinOps practices, and Golang exposure.