AWS Cloud Infrastructure Engineer

Job description

Role: The Cloud Infrastructure Engineer is an experienced individual contributor responsible for designing, implementing, and operating secure, scalable, and highly available AWS infrastructure supporting a production-grade, multi-account B2B SaaS platform in the financial services industry. This role is critical to maintaining platform resilience, security, automation maturity, and operational excellence across production and non-production environments. The engineer operates with moderate autonomy, owning defined areas of the AWS environment while contributing to infrastructure standards, reliability engineering, and security best practices. ### Responsibilities - Design, build, and maintain AWS infrastructure across production and non-production environments - Support application deployments and underlying platform services required for reliable operation - Implement and manage infrastructure using Infrastructure as Code (Terraform) - Configure and maintain AWS services including compute, storage, networking, and managed services - Monitor infrastructure health, availability, and performance; respond to incidents and perform root cause analysis - Partner with application engineering and security teams to support system reliability and scalability - Implement and maintain backup, disaster recovery, and high-availability solutions - Support automation related to infrastructure provisioning and application deployments - Manage IAM roles, permissions, and access controls in alignment with security policies - Contribute to cloud cost monitoring and optimization efforts - Maintain documentation, runbooks, and operational procedures - Participate in on-call or incident response rotations as required Core AWS & Cloud Technologies Compute & Containers - Amazon ECS (Elastic Container Service) - Amazon EC2 - Amazon ECR (Elastic Container Registry) - AWS Lambda (event-driven workloads) Networking & Edge - Amazon VPC (multi-AZ design, subnet segmentation) - Internet Gateway (IGW) - VPC Peering - Elastic Load Balancing (ALB) - AWS WAF - Amazon Route 53 - AWS Data Transfer optimization Databases & Caching - Amazon RDS (PostgreSQL) and PSQL - Amazon DocumentDB (MongoDB compatibility) - Amazon ElastiCache (Redis) Messaging & Streaming - Amazon MSK (Managed Streaming for Apache Kafka) Security & Compliance - AWS IAM - AWS KMS - AWS Secrets Manager - AWS Config - AWS CloudTrail - Amazon GuardDuty - Amazon Inspector - AWS WAF - Auth0 Monitoring & Observability - Amazon CloudWatch (metrics, logs, alarms, events) CI/CD & DevOps