Senior Cloud / AWS Infrastructure Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Cloud / AWS Infrastructure Engineer based in the United States. As a Senior Cloud / AWS Infrastructure Engineer, you’ll build, operate, secure, and evolve a large-scale AWS environment supporting a global consumer platform.

You’ll work across cloud architecture, infrastructure as code, security engineering, reliability, automation, and disaster recovery.

A major focus will be designing and implementing cross-region disaster recovery against clearly defined RPO and RTO objectives.

You’ll also strengthen cloud security through federated identity, least-privilege access, organizational guardrails, and automated controls.

The role combines deep hands-on engineering with significant ownership over infrastructure standards, operational resilience, and technical decision-making.

You’ll work in a Terraform-first, pull-request-driven environment alongside distributed engineering and DevOps teams across multiple time zones.

This is an opportunity to take ownership of consequential infrastructure challenges while improving the resilience, security, and scalability of a sophisticated AWS estate.

Accountabilities

• Extend and maintain a versioned Terraform module library and account customization layers covering networking, IPAM, private hosted zones, SSM access, backup infrastructure, account baselines, and other foundational services.
• Design and maintain VPC architectures, cross-account networking, shared services, and hub-and-spoke connectivity patterns across a multi-account AWS environment.
• Support the migration and consolidation of legacy infrastructure into standardized AWS account structures, Terraform state management, and infrastructure-as-code practices while minimizing operational risk and downtime.
• Design and implement cross-region disaster recovery for critical platforms, including database replication, backup replication, storage replication, container image distribution, DNS failover, and infrastructure parity across regions.
• Establish recovery objectives with business stakeholders, define RPO and RTO targets, map application dependencies into recovery tiers, and determine appropriate restoration sequences.
• Standardize organization-wide backup policies, retention requirements, centralized backup vaults, and cross-region or cross-account backup strategies.
• Conduct scheduled disaster recovery tests and game days, documenting repeatable runbooks that enable reliable recovery by on-call teams.
• Design and strengthen IAM policies, trust relationships, permission boundaries, IAM Identity Center permission sets, and least-privilege access patterns.
• Replace long-lived credentials with federated SSO, OIDC, and short-lived assumed-role access across infrastructure and CI/CD workflows.
• Develop and maintain Service Control Policies, organizational security controls, automated remediation, and preventive guardrails.
• Expand detective security capabilities using AWS Config, Security Hub, GuardDuty, CloudTrail, and related monitoring or SIEM tooling.
• Manage secrets through AWS Secrets Manager and SSM Parameter Store, including secure storage and rotation processes.
• Support security incident response and CloudTrail investigations while converting findings into durable engineering improvements.
• Operate core infrastructure services, including monitoring, alerting, backups, patching, lifecycle management, and reliability tooling.
• Improve Prometheus, Grafana, Alertmanager, and CloudWatch coverage so meaningful production issues are identified and escalated quickly.
• Troubleshoot production issues across compute, networking, storage, databases, and other infrastructure layers.
• Develop automation and operational tooling using Python and Bash, while improving infrastructure CI/CD workflows.
• Maintain and evolve AWS Control Tower and the landing zone, while contributing to cloud cost visibility and optimization.
• Use modern AI-assisted engineering tools, including Claude, Claude Code, and Cowork, as part of day-to-day development and infrastructure workflows.

Requirements

• 5+ years of experience building and operating production AWS infrastructure.
• Strong hands-on Terraform experience in a team environment, including module design and versioning, remote state management, drift handling, and pull-request-based…