jobapplier

AWS Cloud Platform Engineer

Appnovation

Skills

Required

  • AWS
  • cloud, platform / DevOps engineering
  • Amazon ECR
  • permission boundaries
  • secrets and config management
  • Parameter Store
  • CI/CD pipelines
  • GitHub Actions
  • GitLab CI
  • CodePipeline / CodeBuild
  • Docker
  • ECS / EKS / Fargate / Lambda

Preferred

  • IAM
  • IaC
  • pipelines
  • VPC design
  • infrastructure-as-code
  • AWS structure
  • building secure VPC designs
  • Terraform / AWS CDK/CloudFormation

Join our team as an AWS Cloud Platform Engineer, where you will build and own the foundation of our platform, including AWS accounts, networking, identity, and infrastructure-as-code. You will have a main focus in either Infrastructure & IaC or CI/CD & Runtime Deployment, and work closely across both areas.

You automate anything you have to do twice

Experience with Amazon Bedrock, AgentCore Runtime, or deploying LLM/agent-based applications

Responsibilities

  • Your responsibilities will include designing and standing up the multi-account AWS structure, building secure VPC designs, defining IAM roles and permission boundaries, and automating promotion from development to production.
  • You will also be responsible for configuring and deploying agents, building starter repos and pipeline templates, and ensuring security and compliance.
  • Construire et posséder la couche de base AWS : comptes, réseau, frontières d'identité et modules IaC réutilisables.
  • Posséder le chemin du commit à l'agent en cours d'exécution : constructions de conteneurs, Amazon ECR, pipelines, promotion de l'environnement.
  • Concevoir et mettre en place la structure multi-comptes AWS (Organisations, Control Tower ou équivalent) avec des garde-fous.
  • Clear communication and comfortable working in a blended client and vendor team
  • Solid AWS networking knowledge: VPC design, routing, VPC endpoints, PrivateLink, Transit Gateway and DNS
  • Strong infrastructure-as-code skills with Terraform and/or AWS CDK/CloudFormation, including writing reusable modules

Requirements

  • Experience with secrets and config management (AWS Secrets Manager, Parameter Store)
  • 6+ years of cloud, platform or DevOps engineering experience, with at least 4 years hands-on building production AWS environments
  • Hands-on experience building CI/CD pipelines (GitHub Actions, GitLab CI, AWS CodePipeline/CodeBuild or similar)
  • Strong container skills: Docker, Amazon ECR, and deploying to ECS, EKS, Fargate or Lambda
  • Deep hands-on strength in at least one of the two focus areas, and working knowledge of the other
  • Deep understanding of AWS IAM, including cross-account access, permission boundaries and service control policies

You have prior experience in consulting

  • Experience in pharma, life sciences or another regulated industry with strict security and change control requirements
  • You work well inside a client team and build trust quickly
  • You default to secure, least-privilege designs and can explain why
  • Experience with policy-as-code and supply chain security tools (e.g., OPA, Checkov, cosign, SBOM tooling, Amazon Inspector)
  • AWS certifications such as Solutions Architect Professional, DevOps Engineer Professional or Advanced Networking
  • You think in reusable building blocks and care about the engineers who use them after you
  • You write things down so decisions don’t live only in your head

Preferred

  • Prior experience and connections in the Life Sciences industry is preferred