AWS Cloud Engineer III

• Provision and manage AWS accounts and services, including decommissioning within AWS Organizations.
• Perform VPC provisioning, upgrades, and configuration management using Terraform.
• Manage Transit Gateway attachments, route tables, and cross-account network connectivity.
• Support compute infrastructure including EC2 fleets, Auto Scaling Groups, and load balancers.
• Fulfill infrastructure change requests through ITSM processes and formal change management.
• Develop, maintain, and troubleshoot Terraform configurations for AWS provisioning.
• Operate within Terraform Cloud workspaces with policy-as-code enforcement.
• Leverage and contribute to internal Terraform modules, guardrails, and standardized workflows.
• Implement and maintain SCPs, IAM policies, and least-privilege access models.
• Enforce encryption and data protection standards across EBS, RDS, S3, and KMS.
• Triage and remediate findings from CSPM tools, vulnerability scans, and drift detection.
• Manage VPC endpoints, PrivateLink connectivity, and network security controls.
• Monitor and respond to alarms, security findings, and AWS Config rule violations.
• Support FinOps practices including budget monitoring, cost enforcement, and optimization recommendations.
• Participate in the on-call rotation for cloud platform support.
• Collaborate with application teams, security, and enterprise architecture stakeholders.
• Maintain operational runbooks, SOPs, and technical documentation.
• Document infrastructure decisions, configurations, troubleshooting procedures, and support guides.

We are seeking an AWS Cloud Engineer III to join our dynamic team. The ideal candidate will have strong experience in multi-account AWS operations, Terraform-based infrastructure as code, and security controls in regulated environments, and a proven ability to operate, secure, and optimize an enterprise AWS platform at scale., * 5-10 years of hands-on cloud infrastructure engineering with an AWS focus.

• Proficiency with Terraform (HCL) and IaC lifecycle management.
• Deep knowledge of AWS services: VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, ALB/NLB, Transit Gateway.
• Experience operating multi-account environments using AWS Organizations and SCPs.
• Strong IAM policy design, cross-account access, and least-privilege principles.
• Experience with CI/CD pipelines such as Terraform Cloud, Jenkins, or GitHub Actions.
• Git-based workflows including branching, pull requests, and code reviews in GitHub Enterprise or similar.
• Background in regulated or enterprise environments with formal change management (e.g., ServiceNow).
• Strong troubleshooting and problem-solving in complex multi-account AWS setups.
• Excellent written and verbal communication with ability to produce clear technical documentation.

Preferred Skills:

• Experience with CSPM platforms and vulnerability management workflows.
• Experience with FinOps tooling and cost optimization in AWS.

• Competitive compensation and benefits.
• Opportunities for growth with global clients.
• A supportive, inclusive culture that values innovation and people.
• Exposure to cutting-edge technologies and projects.

BCforward is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, BCforward has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long-term relationships and delivering excellence through innovation, collaboration, and integrity.