Senior AWS Cloud, DevOps & Security Engineer

Role Summary

The engineer will design, build, secure, automate, operate, and support AWS environments for the HMS Modernization and Teradata Migration programs. This is a broad hands-on AWS platform role covering cloud infrastructure, networking, security, automation, CI/CD, observability, managed services, and production operations. Terraform is a primary automation tool, but the position is not limited to Terraform.

Key Responsibilities

• Design, build, and operate AWS environments across DEV, TEST, UAT, PROD, and DR.
• Manage AWS accounts, service quotas, resource governance, tagging, cost controls, and environment readiness.
• Implement private VPC/spoke architecture, subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity.
• Coordinate integrations with corporate networks, firewalls, Netskope, on-premises systems, and shared AWS network services.
• Build and support EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, Systems Manager, and related AWS services.
• Design IAM roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access.
• Implement KMS encryption, certificate management, S3 security, secrets management, vulnerability remediation, and compliance controls.
• Develop infrastructure automation using Terraform, AWS CloudFormation where appropriate, AWS CLI, Python, PowerShell, and Bash.
• Build and maintain GitHub-based CI/CD pipelines for infrastructure and application deployments.
• Establish automated validation, security scanning, policy checks, approval gates, release controls, and rollback procedures.
• Implement CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alarms, dashboards, and centralized operational monitoring.
• Support AWS MWAA/Airflow, RDS PostgreSQL, S3 landing zones, bastion services, and private application access.
• Troubleshoot complex IAM, KMS, DNS, routing, firewall, endpoint, Linux, EC2, database, and managed-service issues.
• Perform architecture reviews, cost optimization, capacity planning, disaster recovery planning, and production-readiness assessments.
• Create architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation.
• Participate in production support, incident response, root-cause analysis, and service improvement.

Required Experience

• 5+ years of hands-on AWS cloud engineering, DevOps, platform engineering, or cloud security experience.
• Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity.
• Experience operating private, regulated, or enterprise AWS environments.
• Strong infrastructure-as-code experience with Terraform; CloudFormation or AWS CDK experience is beneficial.
• Experience with GitHub Actions or comparable CI/CD platforms.
• Proficiency with AWS CLI, Linux, Python, PowerShell, and Bash automation.
• Understanding of identity federation, SAML/OIDC, secrets management, certificates, encryption, and least-privilege access.
• Ability to troubleshoot across cloud infrastructure, networking, security, application, and on-premises boundaries.
• Experience with monitoring, incident response, change management, and production operations.

Preferred

• AWS Solutions Architect, DevOps Engineer, Security, or Advanced Networking certification.
• Experience with AWS MWAA, Airflow, Cognito, RDS PostgreSQL, Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS.
• Experience supporting healthcare, government, or other regulated workloads.