The AWS Cloud Engineer III will remediate a legacy AWS cloud environment to address identified security vulnerabilities and technical risk. Work includes assessing existing AWS workloads, remediating security findings, and migrating resources to a standardized and secure AWS Landing Zone aligned with approved architecture, governance, and security standards.
The engineer will use Terraform to implement and manage infrastructure as code, ensuring consistent, repeatable, and auditable remediation and migration activities. Responsibilities include implementing AWS security best practices related to identity and access management, network security, logging, monitoring, and encryption; validating compliance with DIR security policies and audit requirements; and producing required technical and operational documentation.
Minimum Yrs of Experience, Skills, and Qualifications
· 4–7 years of experience in cloud, infrastructure, or systems engineering
· 2+ years of hands‑on experience supporting AWS environments
· Experience supporting remediation, migration, or modernization of existing (legacy) cloud
· Hands‑on experience working in Amazon Web Services (AWS) enterprise environments
· Experience remediating cloud security findings or implementing security controls under established standards
· Experience using Terraform to deploy, update, or manage cloud infrastructure
· Familiarity with cloud security best practices and the shared responsibility model
· Experience following documented architecture, security, and governance standards
· Ability to execute defined remediation and migration tasks under general direction
· Experience producing technical documentation and implementation artifacts
· Strong communication and collaboration skills.
Preferred Skills and Qualifications
· Prior experience supporting legacy AWS environment remediation
· Familiarity with AWS Landing Zone concepts or standardized cloud environments
· Working or supporting experience with Microsoft Azure (hybrid or shared‑services scenarios)
· Familiarity with DIR security standards and compliance expectations