Lead AWS Engineer

Job Description

Key Responsibilities Architect and Design: Lead the architectural design of highly available, scalable, and secure cloud infrastructure on AWS. Provide expert guidance on AWS best practices and standards, with a security-first mindset Infrastructure as Code (IaC): Develop and maintain sophisticated, reusable IaC modules and pipelines using tools like Terraform, AWS CloudFormation, and Ansible to automate the provisioning and management of our infrastructure CI/CD and DevOps: Design, implement, and manage robust and secure CI/CD pipelines for application and infrastructure deployments. Champion a DevSecOps culture across the organization Cost Optimization: Continuously monitor and optimize AWS resource utilization to manage costs effectively. Develop and implement strategies for cost savings and resource efficiency Monitoring and Observability: Establish and maintain comprehensive monitoring, logging, and alerting solutions using tools like AWS CloudWatch, Datadog, Prometheus, and Grafana to ensure high availability and performance Technical Leadership and Mentorship: Provide technical guidance and mentorship to junior and mid-level engineers. Lead by example in writing clean, efficient, and well-documented code Collaboration: Work closely with development, operations, and GRC (Governance, Risk, and Compliance) teams to ensure seamless and secure application deployments Strategic Planning: Contribute to the development of the long-term cloud strategy and roadmap. Evaluate new AWS services and technologies to drive innovation and efficiency Troubleshooting and Incident Response: Act as a final escalation point for complex technical and security issues. Lead incident response and root cause analysis efforts Ideal Candidate Bachelors or Masters degree in Computer Science, Information Technology, or a related field 10+ years of professional experience in a cloud engineering or infrastructure role with a primary focus on AWS Expert-level knowledge of core AWS services, including but not limited to: Compute: EC2, Lambda, EKS, ECS Storage: S3, EBS, Glacier, RDS, DynamoDB Networking: VPC, Route 53, ELB, API Gateway Extensive hands-on experience with Infrastructure as Code tools, with a strong preference for Terraform AWS Security Services: Deep, hands-on experience with a wide range of AWS security services, including AWS IAM (Identity and Access Management), AWS WAF (Web Application Firewall), AWS Shield, AWS KMS (Key Management Service), AWS Security Hub, Amazon GuardDuty, and AWS Config Proven experience in designing and managing CI/CD pipelines using tools such as Jenkins, GitLab CI, or AWS CodePipeline Strong proficiency in scripting languages such as Python, Bash, or PowerShell. In-depth knowledge of containerization and orchestration technologies, including Docker and Kubernetes Solid understanding of networking concepts (TCP/IP, DNS, VPN, firewalls). Security Architecture: Proven experience in designing and implementing a secure AWS architecture, including network security (VPC design, security groups, NACLs), and data protection strategies (encryption, key management) Compliance and Governance: Experience implementing and managing cloud environments compliant with industry standards such as ISO 27001, SOC 2, and PCI DSS Threat Detection and Incident Response: Demonstrable experience in developing and implementing threat detection mechanisms and leading incident response procedures within an AWS environment Vulnerability Management: Experience with vulnerability scanning and management for cloud infrastructure and applications DevSecOps: A strong background in integrating security into the CI/CD pipeline, including static and dynamic code analysis, and dependency scanning AWS Certified Security - Specialty certification is highly desirable AWS Certified Solutions Architect - Professional or other advanced AWS certifications Experience with multi-account AWS environments and AWS Organizations Familiarity with serverless architectures and frameworks Knowledge of database administration and optimization in a cloud environment