> Markdown version of [/jobs/ext/2943506-aws-cloud-architect](https://www.wearedevelopers.com/jobs/ext/2943506-aws-cloud-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Aws Cloud Architect - **Company:** Luxoft Spain - **Location:** Pontevedra, Spain - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Amazon S3, Cloud Engineering, Computer Networks, Information Engineering, DevOps, Amazon DynamoDB, Github, Identity and Access Management, OpenID, Role-Based Access Control, Azure Machine Learning, Kubernetes, Deployment Automation, Machine Learning Operations, Route53, Virtual Agents, Terraform, Dynatrace - **Published:** September 16, 2026 - **Apply:** https://www.buscojobs.com.es/aws-cloud-architect-en-mos-ID-370631419 ## About the Role frameworks4+ years of hands-on AWS experienceAWS Certifications:Required: AWS Solutions Architect (Associate or Professional)DevOps Engineer, Security Specialty Kubernetes & EKS ExpertiseEKS cluster provisioning and operationsKubernetes RBAC and network policies Infrastructure as Code (Terraform)Advanced Terraform capabilities: xbhjioeRemote state management (S3 + DynamoDB)Multi-environment configurationSecurity scanning (Checkov, tfsec) AWS Services ProficiencyEKS, ECR, ALB, Route 53, ACMIAM, KMS, Secrets ManagerIAM Identity CenterCloudTrail, AWS ConfigGuardDuty, Security Hub, AWS WAF AI/ML ExposureSageMaker (model deployment and endpoints)Comprehend (NLP and PII detection) DevOps & IdentityGitHub Actions ? AWSEKS OIDC provider integration Observability & DebuggingPrometheus, GrafanaAWS X-RayCloudWatch Logs Insights Kubernetes SecurityNetwork PoliciesEnglish ## Description Project descriptionThe project is for one of the world's famous science and technology companies in pharmaceutical industry, supporting initiatives in AWS, AI and data engineering, with plans to launch over 20 additional initiatives in the future.We are seeking a highly skilled Cloud Engineer to lead the infrastructure design, deployment, and operations of the AI agent orchestration platform on AWS.This role is responsible for building and managing a Kubernetes-native, enterprise-grade platform that supports scalable AI agent workloads across development, QA, and production environments.AWS Infrastructure & ArchitectureDesign, provision, and manage AWS infrastructure using Terraform, aligned with the AWS Well-Architected FrameworkAmazon EKSIAMRoute 53AWS Certificate Manager (ACM)Kubernetes (EKS) Platform OperationsOwn and operate EKS clusters end-to-end:IRSA (IAM Roles for Service Accounts) configurationBuild and maintain automated deployment pipelines using:GitHub ActionsEnable multi-environment deployments:Blue/Green deploymentsIntegrate AWS-native security and governance controls:AWS WAFEnforce policy controls using:Observability & MonitoringAmazon Managed PrometheusAmazon Managed GrafanaCloudWatch Container InsightsAWS X-Ray (distributed tracing)Leverage AWS AI/ML services to support agent orchestration:Karpenter bin-packing strategiesIntegrate MCP servers and execution frameworks4+ years of hands-on AWS experienceAWS Certifications:Required: AWS Solutions Architect (Associate or Professional)DevOps Engineer, Security Specialty Kubernetes & EKS ExpertiseEKS cluster provisioning and operationsKubernetes RBAC and network policies Infrastructure as Code (Terraform)Advanced Terraform capabilities: xbhjioeRemote state management (S3 + DynamoDB)Multi-environment configurationSecurity scanning (Checkov, tfsec) AWS Services ProficiencyEKS, ECR, ALB, Route 53, ACMIAM, KMS, Secrets ManagerIAM Identity CenterCloudTrail, AWS ConfigGuardDuty, Security Hub, AWS WAF AI/ML ExposureSageMaker (model deployment and endpoints)Comprehend (NLP and PII detection) DevOps & IdentityGitHub Actions ? AWSEKS OIDC provider integration Observability & DebuggingPrometheus, GrafanaAWS X-RayCloudWatch Logs Insights Kubernetes SecurityNetwork PoliciesEnglish ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss) - [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix) - [From Prototype to Production: Build AI Agents with This Free 4-Course Learning Path](https://www.wearedevelopers.com/magazine/655-from-prototype-to-production-build-ai-agents-with-this-free-4-course-learning-path)