Senior AWS Platform Engineer

Role : Senior AWS Platform Engineer

Location : Warren , NJ (Hybrid)

Duration: Full-Time Opportunity

Salary : $125k to $130k

Experience: 8+ years overall | Strong hands-on AWS focus Certifications: AWS Solutions Architect – Associate (minimum) | Professional preferred Engagement Type: Cloud Platform Engineering & DevOps

About the Role

We are looking for a Senior AWS Platform Engineer with 8+ years of hands-on cloud and platform engineering experience to join a high-impact team delivering and operating enterprise-grade AWS infrastructure. This is a deeply technical individual contributor role — not an architecture advisory or management position. You will design, build, and operate the foundational platform capabilities that engineering teams depend on: infrastructure automation, container platforms, CI/CD pipelines, security controls, and cloud-native APIs.

The right candidate writes production Terraform that other engineers build on, operates EKS clusters that run real workloads, and builds Python tooling that solves operational problems at scale. You are equally comfortable in the AWS console diagnosing a networking issue and in a code review ensuring Terraform modules meet reusability standards. You take pride in platforms that are not just functional but operationally excellent — well-observed, cost-governed, and secure by default.

This role is based in New Jersey with hybrid onsite expectations.

Key Responsibilities

AWS Platform Architecture & Operations

• Design, deploy, and operate production AWS environments at scale — including compute (EC2, ECS, EKS, Lambda), storage (S3, EBS, EFS), networking (VPC, Transit Gateway, Direct Connect, Route53), and identity (IAM, AWS SSO, SCPs).
• Architect and maintain multi-account AWS environments using AWS Organizations, Control Tower, and account vending pipelines — including OU structure, SCP design, guardrail enforcement, and account baseline automation.
• Implement and govern cloud security controls at scale — IAM least-privilege design, permission boundaries, VPC security architecture, KMS key management, Secrets Manager, Security Hub, GuardDuty, AWS Config rules, and CloudTrail governance.
• Own cost governance for the AWS platform — implementing tagging policies, cost allocation structures, budget alerting, rightsizing analysis using Compute Optimizer, and Savings Plans / Reserved Instance strategy. Build FinOps reporting tooling where native tooling falls short.
• Maintain deep operational familiarity with AWS networking — including VPC design, Transit Gateway routing, NAT Gateway, PrivateLink, DNS architecture, security group management, and network troubleshooting at scale.
• Perform platform reliability engineering — designing for HA/DR, implementing auto-scaling strategies, performing capacity planning, and ensuring production workloads meet availability and performance SLOs.

Infrastructure as Code — Terraform

• Design, build, and maintain reusable, modular Terraform codebases that serve as the foundational IaC layer for the platform — covering networking, compute, security, identity, and data services.
• Architect Terraform module libraries with clear interface design, versioning strategy, and documentation standards that enable other engineering teams to consume infrastructure safely and consistently.
• Manage remote Terraform state across multi-account, multi-region environments — including S3/DynamoDB state backend configuration, state isolation strategy, and state migration procedures.
• Implement Terraform drift detection workflows — identifying configuration drift between IaC-defined state and actual infrastructure, establishing remediation processes, and preventing drift accumulation.
• Enforce policy-as-code using Terraform Sentinel, OPA/Conftest, or Checkov — implementing guardrails that prevent misconfigured or non-compliant infrastructure from being deployed through automated pipelines.
• Integrate Terraform into automated delivery pipelines — including plan/apply automation, PR-based infrastructure review workflows, and environment promotion gates with automated compliance validation.

Containers & Kubernetes (EKS)

• Design, deploy, and operate production EKS clusters — including cluster version management, node group and Fargate profile configuration, cluster autoscaler and …