Hybrid Senior AWS Cloud Engineer bei OpenJaw Technologies

Job Summary 

We are seeking a highly skilled Senior AWS Cloud Engineer with deep expertise in networking, security, and infrastructure automation to design, deploy, and optimize scalable and secure AWS environments. The ideal candidate will have hands-on experience with AWS Landing Zones, Infrastructure as Code (IaC), and cloud governance frameworks. You will play a key role in architecting cloud foundations, automating deployments, and ensuring compliance with security best practices. 

Key Responsibilities:  

Cloud Architecture & Landing Zones:

• Design, implement, and manage AWS Landing Zones to enforce multi-account governance, security, and networking best practices.
• Define and deploy secure, scalable cloud foundations (e.g., AWS Control Tower, AWS Organizations, SCPs, IAM policies).
• Optimize network architecture (VPC, Transit Gateway, Direct Connect, VPN, NACLs, Security Groups).

Infrastructure as Code (IaC):

• Automate cloud resource provisioning using Terraform, AWS CDK, or CloudFormation.
• Develop reusable IaC modules/templates for consistent deployments.
• Implement CI/CD pipelines for infrastructure (e.g., AWS CodePipeline, GitHub Actions).

Security & Compliance:

• Enforce AWS security best practices (IAM, KMS, GuardDuty, Config Rules, Inspector).
• Design zero-trust networking (e.g., segmentation, private endpoints).
• Ensure compliance with frameworks (SOC 2, ISO 27001, HIPAA, etc.).

Operations & Optimization:

• Troubleshoot complex cloud infrastructure issues (networking, performance, cost).
• Monitor and optimize cost, performance, and reliability (AWS Well-Architected Framework).
• Disaster recovery/backup procedures.
• Internet security and virus protection.
• Mentor junior engineers and document standards.
• Responsible for taking part in out-of-hours support.

Required Skills & Qualifications

• 5+ years of hands-on AWS cloud engineering experience.
• Expertise in:
• AWS Landing Zones (Control Tower, Account Factory, Customizations).
• Networking: TCP/IP, VPC, TGW, DNS, Direct Connect, Firewall Manager.
• Security: IAM, KMS, Secrets Manager, CIS Benchmark, Detective Controls.
• IaC: Terraform (preferred), AWS CDK, or CloudFormation.
• DevOps: CI/CD (GitHub Actions, CodePipeline), GitOps.
• Certifications Required (At least one): AWS SysOps Administrator, AWS Solutions Architect, and or DevOps Engineer.
• Strong scripting skills (Python, Bash) and Linux/Windows administration.

Nice-to-Have

• Knowledge of Kubernetes (EKS) and container security.
• Experience with multi-region architecture design, configuration，and management
• Firewalls (iptables) experience desirable.