AWS Cloud Engineer

Role Overview

We are in the process of migrating our entire hosting infrastructure from a local provider to Amazon Web Services. The AWS Cloud Engineer will own this transition end to end and, once the migration is complete, take on full responsibility for the day-to-day operations, security, cost management, and continuous improvement of our cloud environment.

This is a hands-on, high-ownership role. You will be the go-to person for all things AWS across the organization, working closely with Manish Soni and the wider operations team to ensure our cloud infrastructure is reliable, secure, and cost-efficient.

Key Responsibilities

Migration Planning and Execution

• Lead the assessment of our current local hosting setup and produce a detailed migration roadmap.
• Execute the migration of applications, databases, and workloads to AWS with minimal downtime.
• Coordinate with internal stakeholders and the outgoing hosting provider to ensure a seamless handover.

Infrastructure Management

• Design, provision, and maintain AWS infrastructure using services such as EC2, S3, VPC, Route 53, and CloudFront.
• Implement and manage Infrastructure as Code using Terraform or AWS CloudFormation.
• Ensure high availability and fault tolerance across all hosted workloads.

Security and Compliance

• Enforce AWS security best practices including IAM policies, encryption at rest and in transit, and network isolation.
• Monitor and respond to security alerts; conduct periodic audits and vulnerability assessments.
• Maintain compliance with relevant data protection and industry standards.

Monitoring, Logging, and Incident Response

• Set up and maintain robust monitoring and alerting using CloudWatch, CloudTrail, and third-party tools where appropriate.
• Respond to and resolve incidents swiftly, maintaining clear communication with stakeholders throughout.
• Document runbooks and incident playbooks for recurring issues.

Cost Optimization

• Monitor AWS spend continuously and identify opportunities to reduce costs without compromising performance.
• Implement Reserved Instances, Savings Plans, or auto-scaling strategies as appropriate.
• Present regular cost reports and recommendations to reporting manager.

Networking and Connectivity

• Design and manage VPC architectures, subnets, security groups, and network ACLs.
• Configure and maintain VPN or Direct Connect links where business requirements demand it.

CI/CD and DevOps Practices

• Support or build CI/CD pipelines using AWS CodePipeline, CodeBuild, or equivalent tooling.
• Collaborate with development teams to ensure smooth and repeatable deployments.

Required Qualifications

• 3 to 5 years of hands-on experience working with Amazon Web Services in a production environment.
• Strong working knowledge of core AWS services: EC2, S3, RDS, Lambda, VPC, Route 53, CloudFront, and IAM.
• Practical experience with Infrastructure as Code tools, particularly Terraform or AWS CloudFormation.
• Solid understanding of networking fundamentals including TCP/IP, DNS, subnetting, and firewalling.
• Familiarity with Linux/Unix operating systems and command-line administration.
• Experience with monitoring and logging tools such as CloudWatch or Datadog.
• AWS Certified Solutions Architect (Associate) or equivalent certification, or a clear path towards attaining one.
• Strong written and verbal communication skills; comfortable liaising with non-technical stakeholders.