Cloud Infrastructure Engineer - Landing Zones & Governance

  • Posted 9 hours ago | Updated 9 hours ago

Overview

Remote
Hybrid
Contract - W2
Contract - 3 Month(s)

Skills

Python
Amazon Web Services
Operations
Terraform
Best Practices
Jenkins
Scripting
Networking
Continuous Integration/Delivery
Github
Shell Scripting
Governance
mentor
Provisioning
Incident Response
Continuous Improvement
Identity and Access Management
AWS Certified
Auditing
Infrastructure Engineering

Job Details

Job Title: Senior Cloud Infrastructure Engineer Landing Zones & Governance

Location: Remote (US)

Job Summary

We are seeking a seasoned Senior Cloud Infrastructure Engineer to architect, implement, and maintain secure, scalable multi-account AWS environments using Terraform, AWS Control Tower, and Landing Zones. You will play a pivotal role in driving cloud governance, operational excellence, and automated provisioning of sandbox and production environments. This role requires deep expertise in multi-account AWS strategies, cloud operations, and governance frameworks to ensure compliance and operational agility.

Key Responsibilities

  • Design, deploy, and manage multi-account AWS environments leveraging AWS Landing Zones and Control Tower to meet organizational compliance and security requirements.

  • Build and maintain infrastructure automation using Terraform for provisioning accounts, networking, security controls, and environment configurations.

  • Develop and enforce governance guardrails including Service Control Policies (SCPs), tagging policies, and identity/access management across AWS accounts.

  • Collaborate with security, compliance, and operations teams to embed monitoring, auditing, and compliance controls using AWS native tools and custom solutions.

  • Lead the automation of sandbox environment vending to enable rapid and secure self-service provisioning for development teams.

  • Support cloud operations with incident response, troubleshooting, and continuous improvement of operational playbooks for multi-account setups.

  • Mentor junior engineers and promote best practices for infrastructure as code (IaC), cloud governance, and operational excellence.

  • Stay up to date on AWS services, cloud governance trends, and emerging best practices to continuously evolve the cloud environment strategy.

Required Qualifications

  • 5+ years of experience in cloud infrastructure engineering, particularly with AWS multi-account architectures.

  • Strong hands-on expertise with Terraform to automate and manage AWS infrastructure.

  • In-depth knowledge of AWS Control Tower, Landing Zones, AWS Organizations, and multi-account governance strategies.

  • Experience implementing cloud governance frameworks including IAM policies, Service Control Policies (SCPs), and tagging standards.

  • Solid understanding of cloud operations practices, monitoring, incident response, and infrastructure automation.

  • Proficiency in scripting languages such as Python, Bash, or similar for automation.

  • Excellent collaboration and communication skills across technical and non-technical teams.

Preferred Qualifications

  • AWS certifications such as AWS Certified Solutions Architect Professional or AWS Certified Security Specialty.

  • Experience with AWS security and compliance tools like AWS Config, CloudTrail, GuardDuty, and Security Hub.

  • Familiarity with CI/CD pipelines integrating Terraform (e.g., Jenkins, GitHub Actions).

  • Experience with multi-cloud or hybrid cloud governance is a plus.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.