Lead AWS DevOps Engineer

An enterprise environment undergoing formal change management is building out its Cloud Centre of Excellence and needs a Lead AWS Engineer to define standards and best practice for how AWS is used across the organisation, while remaining hands-on with infrastructure delivery, automation, and governance across a multi-account estate., * Define and own Terraform/Terragrunt module standards and reusable IaC patterns for consumption by other engineering teams, not just personal delivery

• Set governance, security, and billing policy across multi-account AWS environments using AWS Organizations, including SCP and guardrail design
• Architect and maintain core AWS services (ACM, ECS, EC2, RDS, API Gateway, ELB) and network architecture (Transit Gateway, VPC peering, routing) at an organisation-wide standard
• Own AWS WAF policy and rule strategy to protect application workloads across multiple teams/services
• Chair or contribute to architecture and governance reviews, providing technical direction to engineers building against CCoE standards
• Build, maintain, and optimise CI/CD pipelines in Jenkins, and set repository/branching strategy across GitLab and/or GitHub
• Automate configuration management using Ansible, and define automation standards for the wider team
• Own observability strategy using LogicMonitor or equivalent, setting alerting, dashboard, and performance baseline standards
• Support incident, request, and change management processes via ServiceNow, acting as an escalation point for complex issues
• Act as technical mentor/reference point for engineers delivering against guardrails

Must-have:

• Active, transferable SC clearance
• Strong hands-on experience with Terraform (Terragrunt strongly preferred), including designing standards/modules for wider team consumption
• Proven experience managing AWS Organizations in multi-account, governed environments
• Strong AWS networking background: Transit Gateway, VPC design, routing, connectivity
• Core AWS services: ACM, ECS, EC2, RDS, API Gateway, ELB
• AWS WAF policy and rule management
• Jenkins pipeline ownership, GitLab and/or GitHub workflow strategy
• Ansible for configuration management and automation
• ServiceNow queue/ticket management
• LogicMonitor or equivalent (Datadog, CloudWatch, New Relic)
• Demonstrable experience operating at a “lead” or de facto technical authority level, setting standards, not just following them

Nice-to-have:

• Prior formal Cloud Centre of Excellence or platform governance experience
• Experience working in regulated or enterprise environments with formal change management
• Python or Bash Scripting
• Kubernetes/EKS or containerisation beyond ECS