15+ Years of Senior AWS Cloud Engineer :: Onsite (Dallas, TX) -W2 only

Responsibilities

• Design, deploy, and harden AWS cloud platform components (VPC, IAM, EC2, Lambda, ECS/EKS, S3, KMS, Secrets Manager).
• Build enterprisegrade infrastructure-as-code, preferably using AWS CDK; Terraform acceptable as secondary.
• Contribute to scalable, reusable cloud frameworks enabling multi-team adoption ( MAP multiplier ).
• Implement bankgrade security controls, including access boundaries, encryption standards, IAM guardrails, logging/detection, key policies, and network isolation.
• Work directly with security engineering to ensure compliance with Client s highly regulated environment.
• Stand up multi-account landing zone components and deploy secure cloud environments across Prod/NonProd/Dev/Test/DR.
• Implement and maintain CI/CD pipelines (GitHub/GitLab/Jenkins/Argo).
• Troubleshoot cloud infrastructure, network, security, and application deployment issues.
• Deliver production-ready solutions without handholding, making independent decisions that balance performance, security, and resiliency.
• Produce clear documentation, architectural diagrams, and runbooks for consumption across the firm.

Required Experience

• 15+ years total engineering experience; 8 10+ years deep AWS handson.
• Expert in AWS core services: IAM, KMS, VPC, EC2, S3, CloudTrail, GuardDuty, Lambda, ECS/EKS, SQS/SNS.
• Strong experience with AWS CDK; or at minimum, strong Terraform + readiness to transition to CDK.
• Proven ability to operate in heavily regulated environments where auditability, identity control, and encryption are mandatory.
• Advanced knowledge of:
• IAM permission boundaries, SCPs, key policies
• Private networking, VPC endpoints, SG design
• Logging/detection systems
• Multi-region HA/DR architectures
• Experience deploying large-scale platforms used by multiple teams.
• Proficient in at least one coding/scripting language (Python, TypeScript, Go).
• Experience with Docker, Kubernetes (EKS), container orchestration, and microservices platforms.
• Strong ability to work onsite and collaborate in fast-paced engineering environments.
• Must Have CDK Pipelines, cross-account deployment patterns

Nice-to-Haves

• AI/ML pipeline or SageMaker experience
• Financial services experience
• Monitoring/observability (Datadog, Grafana, CloudWatch)
• Experience writing security automation or compliance-as-code