Senior AWS Platform Engineer

We are looking for a Senior AWS Infrastructure Engineer to redesign our AWS environment. The successful candidate will lead the design and implementation of a secure, scalable, multi-account AWS architecture , enable cost chargeback, and establish long-term operational best practices.

This role is infrastructure-first , requiring strong operating system, networking, and security fundamentals , in addition to deep AWS experience

Key Responsibilities

• AWS Architecture & Multi-Account Design
• Design and implement a best-practice multi-account AWS architecture using AWS Organizations and Control Tower
• Define account strategies for customers, environments (Prod / Non-Prod), and shared services
• Establish and maintain an AWS Landing Zone aligned with security and compliance requirements
• Reduce operational and security risk by eliminating single-account blast radius
• Migration & Execution
• Plan and execute phased migrations of existing workloads from a monolithic AWS account to multiple accounts
• Minimize downtime and risk through careful migration planning, testing, and rollback strategies
• Work closely with application and platform teams during migration and cutover
• Infrastructure as Code & Automation
• Codify account provisioning and baseline infrastructure using Terraform
• Automate guardrails, networking, IAM, logging, and security controls
• Use CI/CD pipelines to support infrastructure as code, not as an application DevOps role
• Security & Governance
• Design and enforce security guardrails using SCPs, IAM boundaries, and least-privilege accessImplement and manage centralized security services including CloudTrail, GuardDuty, Security Hub, and AWS Config
• Support compliance and audit requirements (e.g. ISO 27001) through strong segregation of duties and logging
• Networking
• Design and operate AWS networking at scale, including:
• VPC design and segmentation
• Centralized networking models
• Transit Gateway (nice to have)
• Hybrid connectivity (VPN / Direct Connect where applicable)
• Apply strong TCP/IP, DNS, and routing fundamentals
• Cost Management & Chargeback
• Implement cost monitoring, budgeting, and reporting using AWS Cost Explorer and Budgets
• Enable cost separation and chargeback/showback per customer or account
• Support long-term FinOps visibility as the AWS environment scales
• Operating Systems & Infrastructure Operations
• Apply strong Linux and/or Windows systems engineering knowledge
• Support OS-level hardening, patching, access control, and troubleshooting
• Understand how cloud infrastructure maps to underlying OS and network behavior
  
  

Required Qualifications

• Senior-level experience designing and operating AWS infrastructure at scale
• Hands-on experience with AWS Organizations, Control Tower, and multi-account architectures
• Proven experience migrating workloads from single-account to multi-account AWS environments
• Strong Linux and/or Windows OS fundamentals
• Strong networking fundamentals (TCP/IP, DNS, routing)
• Infrastructure as Code using Terraform
• Experience implementing security guardrails (SCPs, IAM, KMS)
• Experience with centralized logging, monitoring, and security tooling
• Experience with AWS cost management and chargeback/showback models