Cloud Engineer

• Day-to-day delivery of the AWS IAM configuration required to support business requirements, application integrations, workloads, regulatory compliance, and all other platform efforts or deliverables

• Evaluates existing AWS IAM permission policies and adjust them as needed to enforce principle of least privilege.

• Ensure all AWS IAM resources and configuration adhere to and compliant with all corporate policies/standards, industry best

• Participates in Agile team’s ceremonies.

• Ensures service requests contain proper approvals and documentation prior to starting the work and deconflicts discrepancies with the CIE Service Management Lead.

• Actively (immediately on the same day) coordinates with the CIE Service Management Lead to resolve conflicting requirements or unclear information in Jira stories or service requests.

• Ensures security controls are implemented in the CFN templates as required to ensure we maintain a secured Cloud IAM posture.

resolution.

service requests.

• Performs AWS IAM compliance event follow-up and remediation with account owners to resolve event conditions.

• Git/Jenkins/BitBucket/JIRA

• Engineer and deploy AWS IAM resources including users, groups, roles, and policies using AWS CloudFormation templates and following Cloud IAM team processes and procedures

• Actively monitor and respond accordingly to AWS IAM configuration changes, events, and alerts following applicable CIE team process and procedures

• Ensure effective security protection controls and hardening requirements are in place for all AWS IAM resources

practices/benchmarks, and regulatory requirements

• Updates assigned Jira stories daily as required by the Agile team to provide status and next steps.

• Creates new or updates existing CFN templates per requirements outlined in the service requests and Agile stories.

• Ensures principle of least privilege is implemented in every template policy prior to creating Pull Requests.

• Troubleshoots CFN template syntax errors and escalates to the CIE Service Management Lead as needed to ensure same day

• Troubleshoots errors logged in in the CFN StackSet’s Stack Instance or Operations tabs as needed to advance the fulfillment of

• Follows process documentation to ensure proper governance and request to implementation traceability is in place.

• DevOps/IaC/PaC familiarity