AWS Cloud Engineer II

Job Summary

• We are seeking an experienced AWS Cloud Engineer with strong technical leadership, hands-on experience in AWS cloud architecture, and a DevOps mindset
• The ideal candidate will possess in-depth knowledge of AWS services, infrastructure automation, networking, and security, along with demonstrated success in customer satisfaction and cloud deployment processes
• This role is responsible for account creation, updates, retirement, security policies, network operations, and monitoring
• The engineer ensures that all cloud operations are secure, documented, and follow company processes
• This role requires excellent communication, leadership, and problem-solving skills in a dynamic, fast-paced environment

Responsibilities

• Cloud Application Development: Develop, deploy, and manage cloud applications with a focus on scalability, performance, and security in AWS environments
• Technical Leadership: Provide technical direction and guidance to teams, ensuring effective delegation, sound technical judgment, and communication across all levels
• Account Lifecycle: Create, update, and retire AWS accounts
• Use custom account tool (Billund)
• Governance: Follow secure cloud controls and exception handling procedures
• Structure Awareness: Understand and apply Organizational Units (OUs) and Service Control Policies (SCPs), account migration, IAM strategies, and more
• Documentation: Update runbooks and diagrams when approved changes occur
• DevOps: Implement CI/CD pipelines using tools such as Git, Jenkins, and Terraform, ensuring smooth, automated deployments and infrastructure management
• Use GitHub, Terraform Cloud, and CodeBuild for changes and enforcing policy-as-code (Sentinel)
• Update documentation (READMEs, changelogs) as needed
• AWS Account Automation: Automate AWS account creation with proper base infrastructure configurations, adhering to organizational policies
• Check infrastructure against Sentinel policies and AWS Config rules
• Apply minor fixes to policies/rules and remediate known violations using approved patterns
• Maintain policy documentation and update runbooks after changes
• Manage network inspection (ingress), including TLS/SSL certificate lifecycle
• Help troubleshoot Transit Gateway, NAT Gateway, VPC rules, and firewall policies
• Use Panorama, Route 53 Resolver, and CloudTrail for network analysis
• Apply network changes per approved procedures and document them

Skills: