AWS platform engineer

Title : DevOps / Platform Engineer
Location: West Des Moines, IA
Type: Contract 4 Days On-Site

Required Qualifications
Senior-level AWS platform engineering experience: IAM (roles, policies, OIDC federation), ECR, ECS/Fargate, Secrets Manager / SSM, S3, VPC networking, and CloudWatch.
Working knowledge of Amazon ECS on Fargate: comfortable deploying and running containers, including task definitions, services, networking, IAM task roles, CloudWatch logs, ALB/service discovery patterns, and deployment troubleshooting. Deep day-to-day operations expertise is not required; a solid grasp of the basics is sufficient.
Strong Infrastructure-as-Code skills with Terraform, including provider migration, module authoring, and remote-state backends.
Hands-on CI/CD experience with GitHub Actions (reusable workflows, environments, and OIDC to AWS), including building container build-and-publish and deployment pipelines that deploy into Amazon ECS on Fargate.
Proficient scripting in Bash and Python; the skills ship shell and Python helper scripts that must be ported.
Comfortable reading and modifying automation-oriented repositories, including skill/playbook instructions, shell scripts, Python utilities, Terraform modules, GitHub Actions workflows, and Markdown-based technical documentation.
Azure literacy at a reading level: able to interpret existing ACR, AKS, Key Vault, Managed Identity, and Azure DevOps configuration in order to translate intent to AWS.
Solid Docker and Git / GitHub Enterprise fundamentals.

Preferred Experience
Experience using Claude Code or another agentic coding assistant in a professional engineering workflow, including critically reviewing AI-generated changes and validating them with tests or evidence.
Experience with Coder, GitHub Codespaces, devcontainers, cloud development environments, or similar remote workspace platforms.
Familiarity with AWS Blocks, AWS CDK, or similar infrastructure-from-code toolkits (TypeScript/Node), and the judgment to know when adopting them beats a one-to-one port.
Microsoft Entra ID (Azure AD) and OIDC identity-federation experience.
Exposure to data platforms such as Snowflake, Redshift, or AWS Glue.
Financial services or insurance industry experience.