Job Overview
- Job Title: AWS Cloud Engineer (Networking, DevSecOps & Security)
- Overall Experience: 5+ Years
- Relevant AWS Experience: 3+ Years
- Mandatory Certification: AWS Solutions Architect – Associate or higher
Role Summary
The AWS Cloud Engineer will be responsible for designing, implementing, securing, and managing AWS cloud infrastructure, networking, CI/CD pipelines, and security controls for containerised applications, including EKS workloads. The role requires strong hands-on expertise in AWS Networking, DevSecOps, and Cloud Security to ensure scalable, secure, and highly available cloud environments.
Key Responsibilities
- Design, deploy, and manage scalable, highly available AWS cloud infrastructure.
- Manage AWS EKS, ECR, Docker, Kubernetes, Helm, and containerised workloads.
- Implement Infrastructure as Code (IaC) using Terraform or AWS CDK.
- Design and manage AWS networking, including VPC, Transit Gateway, PrivateLink, VPN, Direct Connect, Route 53, and load balancers.
- Build and maintain CI/CD pipelines using GitHub Actions, GitLab CI, or AWS CodePipeline.
- Implement DevSecOps practices, including automated security scanning, vulnerability checks, and deployment automation.
- Manage AWS security controls, including IAM, KMS, Secrets Manager, GuardDuty, Security Hub, WAF, and SCPs.
- Ensure cloud security, compliance, monitoring, performance, and cost optimisation.
- Troubleshoot cloud infrastructure, networking, and security-related issues.
- Develop technical documentation, architecture diagrams, and operational runbooks.
- Collaborate with cross-functional teams and provide technical guidance to junior engineers.
Required Skills
1. AWS Cloud & Infrastructure
- AWS EC2, EKS, ECS, Lambda, AWS Batch, S3, Aurora/RDS, CloudWatch.
- Docker, Kubernetes, Helm, and ECR.
2. AWS Networking
- VPC, Subnets, Route Tables, Transit Gateway, PrivateLink.
- Site-to-Site VPN, Direct Connect, Route 53.
- ALB/NLB, CloudFront, BGP, TCP/IP, and IPSec.
3. DevSecOps & CI/CD
- GitHub Actions, GitLab CI, or AWS CodePipeline.
- Terraform or AWS CDK.
- Infrastructure as Code (IaC), Policy as Code, and GitOps.
- Dependency and container image scanning.
4. Cloud Security
- IAM, IAM Identity Center, AWS Organizations, and SCPs.
- KMS and Secrets Manager.
- GuardDuty, Security Hub, AWS Config, and CloudTrail.
- AWS WAF, Shield, and CIS Benchmarks.
- Knowledge of ISO 27001 and PCI DSS compliance.
5. Scripting & Automation
- Python, Bash, or PowerShell.
Experience & Qualifications
- Minimum 5+ years of experience in Cloud, Infrastructure, Network, or Security Engineering.
- Minimum 3+ years of hands-on AWS experience in production environments.
- Strong experience designing and managing Kubernetes-based containerised workloads.
- Proven experience implementing and maintaining CI/CD pipelines.
- Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
Mandatory Certification
- AWS Certified Solutions Architect – Associate or higher.