Senior AWS Cloud Engineer

Overview

As part of client Core Engineering cloud transformation, we are hiring two Senior AWS Cloud Engineers to build secure, scalable cloud platform components that will be adopted across multiple business units. These engineers must be extremely senior, hands‐on, and able to deliver independently from Day 1.

This role supports AWS‐funded MAP initiatives, where work is AWS‐aligned and designed to accelerate cloud adoption across the firm.

Responsibilities

• Design, deploy, and harden AWS cloud platform components (VPC, IAM, EC2, Lambda, ECS/EKS, S3, KMS, Secrets Manager).
• Build enterprise‐grade infrastructure-as-code, preferably using AWS CDK; Terraform acceptable as secondary.
• Contribute to scalable, reusable cloud frameworks enabling multi-team adoption ( "MAP multiplier”).
• Implement bank‐grade security controls, including access boundaries, encryption standards, IAM guardrails, logging/detection, key policies, and network isolation.
• Work directly with security engineering to ensure compliance with Client's highly regulated environment.
• Stand up multi-account landing zone components and deploy secure cloud environments across Prod/Non‐Prod/Dev/Test/DR.
• Implement and maintain CI/CD pipelines (GitHub/GitLab/Jenkins/Argo).
• Troubleshoot cloud infrastructure, network, security, and application deployment issues.
• Deliver production-ready solutions without handholding, making independent decisions that balance performance, security, and resiliency.
• Produce clear documentation, architectural diagrams, and runbooks for consumption across the firm.

Required Experience

• 15+ years total engineering experience; 8–10+ years deep AWS hands‐on.
• Expert in AWS core services: IAM, KMS, VPC, EC2, S3, CloudTrail, GuardDuty, Lambda, ECS/EKS, SQS/SNS.
• Strong experience with AWS CDK; or at minimum, strong Terraform + readiness to transition to CDK.
• Proven ability to operate in heavily regulated environments where auditability, identity control, and encryption are mandatory.
• Advanced knowledge of:
  • IAM permission boundaries, SCPs, key policies
  • Private networking, VPC endpoints, SG design
  • Logging/detection systems
  • Multi-region HA/DR architectures
• Experience deploying large-scale platforms used by multiple teams.
• Proficient in at least one coding/scripting language (Python, TypeScript, Go).
• Experience with Docker, Kubernetes (EKS), container orchestration, and microservices platforms.
• Strong ability to work onsite and collaborate in fast-paced engineering environments.
• Must Have CDK Pipelines, cross-account deployment patterns

Nice-to-Haves

• AI/ML pipeline or SageMaker experience
• Financial services experience
• Monitoring/observability (Datadog, Grafana, CloudWatch)
• Experience writing security automation or compliance-as-code