AWS Cloud Engineer
Role details
Job location
Tech stack
Job description
This role is part of Bright Vision Technologies' in-house Statement of Work (SOW) engagement. The client, end customer, and employer for this position is Bright Vision Technologies - there is no third-party client, vendor, or implementation partner involved. We do not engage in C2C, 1099, or third-party arrangements for this role. BUT STRICTLY NO C2C/1099/3RD PARTY COMPANIES. ALL OUR ROLES ARE W2 AND NO 3RD PARTY BROKERING PLEASE. Candidates must be willing to work directly as a full-time W2 employee of Bright Vision Technologies and contribute to our in-house SOW deliverables. No new H1B sponsorship is available for this role. However, candidates who are currently on a valid H1B visa and require a transfer are welcome to apply. We will support H1B transfers for qualified candidates. For every role, a technical coding assessment is mandatory. Please apply only if you are confident in your technical abilities and hands-on experience., We are seeking an experienced AWS Cloud Engineer to design, build, and operate large-scale, secure, and highly available cloud platforms on Amazon Web Services. This is a deeply hands-on engineering role spanning architecture, infrastructure-as-code, automation, security, observability, and continuous operational improvement of mission-critical production workloads. The successful candidate will bring strong working knowledge of the AWS service portfolio, deep DevOps fundamentals, and a pragmatic, cost-aware design mindset, and will partner with application, security, and SRE teams to deliver resilient, cloud-native solutions that scale with the business. Key Responsibilities
- Architect, deploy, and operate enterprise-grade AWS environments across compute, networking, storage, identity, and managed data services, with strong attention to scalability, reliability, and security.
- Author and maintain production-quality infrastructure-as-code using Terraform, AWS CloudFormation, or AWS CDK, with rigorous version control, peer review, and automated validation.
- Design multi-account AWS organizations, including landing zones, SCPs, centralized logging, and shared services, to support secure and scalable enterprise adoption.
- Build secure VPC topologies - including subnetting, route tables, transit gateways, VPN, and Direct Connect integrations - that meet enterprise connectivity and isolation requirements.
- Implement strong IAM strategies using roles, permission boundaries, SCPs, AWS SSO, and short-lived credentials to enforce least-privilege access across the organization.
- Design, deploy, and operate Amazon EKS clusters and other container platforms (ECS, Fargate), including auto-scaling, networking, and integration with service meshes and observability stacks.
- Operate AWS managed data and analytics services such as RDS, Aurora, DynamoDB, S3, Redshift, Glue, and Kinesis, optimizing each for the access patterns and SLAs of the workloads it supports.
- Build and maintain robust CI/CD pipelines using AWS CodePipeline, CodeBuild, Jenkins, GitHub Actions, or GitLab CI, enabling repeatable, audited deployments of both infrastructure and applications.
- Implement comprehensive observability using CloudWatch, X-Ray, AWS Distro for OpenTelemetry, Prometheus, Grafana, and third-party tooling, with well-designed dashboards, alerts, and SLOs.
- Drive ongoing cost optimization through right-sizing, savings plans, reserved instances, lifecycle policies, and architectural simplification, with measurable savings tracked over time.
- Implement disaster-recovery and business-continuity capabilities, including cross-region replication, automated backups, regular failover testing, and documented runbooks.
- Strengthen security posture using AWS Security Hub, GuardDuty, Macie, Inspector, Config, and CloudTrail, and lead remediation of findings in collaboration with security teams.
- Advise application development teams on AWS-native design patterns, anti-patterns, and the appropriate service choices for each problem domain.
- Develop automation scripts and operational tooling in Python, Bash, and Go to streamline routine work and accelerate incident response.
- Mentor junior engineers, lead architecture and design reviews, and contribute thought leadership to the broader cloud community within the organization.
Requirements
- Bachelor's degree in Computer Science, Engineering, or a related technical discipline.
- Five or more years of cloud engineering experience, with at least three years focused on AWS in production environments.
- Strong hands-on experience with AWS core services, including EC2, VPC, IAM, S3, RDS, Lambda, CloudFront, and CloudFormation.
- Production-grade experience with infrastructure-as-code tools such as Terraform, AWS CDK, or CloudFormation.
- Solid experience designing and operating Amazon EKS or ECS clusters at scale.
- Hands-on experience with CI/CD pipelines across infrastructure and application workloads.
- Strong scripting skills in Python and Bash, with familiarity in Go or PowerShell considered a plus.
- Deep understanding of cloud security, IAM, encryption, key management, and compliance requirements.
- Experience implementing observability, monitoring, and alerting in cloud-native environments.
- Strong troubleshooting, communication, and documentation skills., * AWS Certified Solutions Architect - Professional or DevOps Engineer - Professional certification.
- Experience with multi-account AWS Organizations and centralized governance.
- Familiarity with service mesh, eBPF-based observability, and zero-trust networking.
- Exposure to FinOps practices and well-architected cost-optimization frameworks.
- Experience operating regulated workloads (HIPAA, PCI-DSS, SOC 2, FedRAMP).
Benefits & conditions
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential. AWS Cloud Engineer Job Title: AWS Cloud Engineer Location: 100% Remote (Continental United States) Position Type: In-house Bright Vision Technologies SOW engagement (no third-party client or vendor) Experience: 5+ years Sponsorship: No new H1B sponsorship available. H1B transfers welcomed for qualified candidates. Employment Type: Full-time, direct W2 with Bright Vision Technologies (no C2C, no 1099, no third-party) Engagement: Long-term, multi-year, aligned to the Bright Vision SOW delivery roadmap Compensation: Competitive base salary commensurate with experience, plus benefits. Employment Terms & Visa Policy