AWS Cloud Engineer III

TOP SKILLS:

Must Have

• AWS VPC architecture and network design patterns (multi-CIDR VPCs, subnets, route tables, security groups, NACLs)
• Cloud security controls: encryption, network isolation, identity management, policy enforcement
• Elastic Load Balancing (ALB, NLB) — listener rules, target groups, TLS termination
• Linux/macOS command-line proficiency
• NAT Gateway, VPC endpoints (interface and gateway), and AWS PrivateLink configuration
• Proficiency in Python, Bash/Shell scripting
• Route53 DNS architecture (private hosted zones, resolver rules, hybrid DNS)
• Transit Gateway design, attachments, route table propagation, and cross-account connectivity
• Understanding of TCP/IP, DNS, TLS/SSL, and network troubleshooting (flow logs, packet captures, traceroute)

Nice To Have

5 – 10 years of hands-on experience in cloud infrastructure engineering (AWS-focused)

·       Demonstrated experience with Terraform (HCL) and IaC lifecycle management

·       Deep working knowledge of AWS core services: VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, ELB (ALB/NLB), Transit Gateway

·       Experience operating multi-account AWS environments using AWS Organizations and SCPs

·       Proficiency in IAM policy design, cross-account access patterns, and least-privilege principles

·       Experience with CI/CD pipelines (Terraform Cloud, Jenkins, GitHub Actions, or equivalent)

·       Experience with Git-based workflows (branching strategies, pull requests, code reviews) in GitHub Enterprise or similar

·       Experience working in regulated or enterprise environments with formal change management  (ServiceNow or equivalent ITSM)

·       Strong troubleshooting and problem-solving skills for complex, multi-account AWS environments

·       Excellent written and verbal communication skills; ability to produce clear technical documentation

Work Environment

·       Remote-first with preference for candidates in the Metro Detroit, Michigan area

·       Standard business hours with participation in an on-call rotation