> Markdown version of [/jobs/ext/21463-cloud-foundations-engineer-account-landing-zone-human](https://www.wearedevelopers.com/jobs/ext/21463-cloud-foundations-engineer-account-landing-zone-human). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Foundations Engineer - Account & Landing Zone (human) - **Company:** Neura Robotics GmbH - **Location:** Metzingen, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Identity and Access Management, Cloud Platform System, Amazon Virtual Private Cloud (VPC), Opsworks - **Published:** May 16, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=a320fd0c420528ba ## About the Role Do you have experience in Identity & access management?, * 5+ years of experience in cloud infrastructure or platform engineering, with significant hands-on AWS experience in a fast-growing company environment. * Deep practical experience with AWS Control Tower, Organizations, Account Factory, and multi-account landing zone design - you have built this before, not just read about it. * Strong Infrastructure as Code skills, IaC is your default tool, not an afterthought. * Solid understanding of AWS IAM, SSO/Identity Center, and permission boundary design at organizational scale. * Experience designing and implementing cloud security controls (SCPs, Config Rules, GuardDuty, Security Hub, VPC security) with a clear philosophy: security that enables teams, not security that blocks them. * A proven solution-oriented mindset: you find creative, pragmatic paths forward. * Comfort working at pace in a scaling organization - you can handle ambiguity, incomplete requirements, and shifting priorities without losing quality. * Strong English communication skills; ability to explain complex access and governance topics clearly to non-specialists. German is a plus. ## Description * You are responsible for NEURA's AWS account management, Control Tower setup, and landing zone architecture. * You work closely with engineering teams, security, and leadership to ensure that the cloud foundation scales with the business - without becoming a bottleneck. * You design the guardrails, but you design them to enable, not to restrict. * Designing, implementing, and evolving NEURA's AWS landing zone - including Control Tower, Account Factory, organizational units, and account vending pipelines. * Owning the IAM and SSO architecture: permission sets, role hierarchies, and a structured, self-service-oriented access request workflow that keeps teams unblocked. * Partnering with fast-growing engineering teams to onboard new accounts, new environments, and new use cases quickly - your default answer is "here's how we do it", not "that's not possible yet." * Establishing and enforcing tagging policies, budget alerts, and cost visibility across all accounts, giving teams clear ownership of their cloud spend. * Implementing cloud security controls that protect without paralyzing: SCPs, AWS Config Rules, GuardDuty, Security Hub, etc. - designed with the principle that security enables velocity, not the other way around. * Acting as interface between Cloud Platform and the Security team, translating policy requirements into concrete, automated cloud controls. * Everything as Infrastructure as Code. No manual changes in production ever. ## Related Videos - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022) - [Reliable scalability: How Amazon.com scales on AWS](https://www.wearedevelopers.com/videos/983-reliable-scalability-how-amazon-com-scales-on-aws) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Seriously gaming your cloud expertise: from cloud tourist to cloud native](https://www.wearedevelopers.com/videos/373-seriously-gaming-your-cloud-expertise-from-cloud-tourist-to-cloud-native) ## Related Articles - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany) - [Where to Find German Tech Jobs](https://www.wearedevelopers.com/magazine/366-where-to-find-german-tech-jobs) - [Jobs in Germany for Americans](https://www.wearedevelopers.com/magazine/423-jobs-in-germany-for-americans) - [Frontend Developer Salary in Germany [2023]](https://www.wearedevelopers.com/magazine/195-frontend-developer-salary-in-germany-2023) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)