Responsibilities

Design, deploy, and harden AWS cloud platform components (VPC, IAM, EC2, Lambda, ECS/EKS, S3, KMS, Secrets Manager).
Build enterprise‑grade infrastructure-as-code, preferably using AWS CDK; Terraform acceptable as secondary.
Contribute to scalable, reusable cloud frameworks enabling multi-team adoption (“MAP multiplier”).
Implement bank‑grade security controls, including access boundaries, encryption standards, IAM guardrails, logging/detection, key policies, and network isolation.
Work directly with security engineering to ensure compliance with Client’s highly regulated environment.
Stand up multi-account landing zone components and deploy secure cloud environments across Prod/Non‑Prod/Dev/Test/DR.
Implement and maintain CI/CD pipelines (GitHub/GitLab/Jenkins/Argo).
Troubleshoot cloud infrastructure, network, security, and application deployment issues.
Deliver production-ready solutions without handholding, making independent decisions that balance performance, security, and resiliency.
Produce clear documentation, architectural diagrams, and runbooks for consumption across the firm.

Required Experience

15+ years total engineering experience; 8–10+ years deep AWS hands‑on.
Expert in AWS core services: IAM, KMS, VPC, EC2, S3, CloudTrail, GuardDuty, Lambda, ECS/EKS, SQS/SNS.
Strong experience with AWS CDK; or at minimum, strong Terraform + readiness to transition to CDK.
Proven ability to operate in heavily regulated environments where auditability, identity control, and encryption are mandatory.
Advanced knowledge of:
IAM permission boundaries, SCPs, key policies
Private networking, VPC endpoints, SG design
Logging/detection systems
Multi-region HA/DR architectures
Experience deploying large-scale platforms used by multiple teams.
Proficient in at least one coding/scripting language (Python, TypeScript, Go).
Experience with Docker, Kubernetes (EKS), container orchestration, and microservices platforms.
Strong ability to work onsite and collaborate in fast-paced engineering environments.
Must Have CDK Pipelines, cross-account deployment patterns

Nice-to-Haves

Best NanoTech

New Jobs