> Markdown version of [/jobs/ext/3079398-software-engineer-aws-cloud-infrastructure](https://www.wearedevelopers.com/jobs/ext/3079398-software-engineer-aws-cloud-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Engineer, AWS Cloud Infrastructure - **Company:** Praxis Precision Medicines, Inc. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $13,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Cloud Database, Continuous Integration, Data Stores, Domain Name System (DNS), Amazon DynamoDB, Github, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Routing, OpenID, Peering, Productivity Software, Azure Active Directory, Security Assertion Markup Language (SAML), Software Engineering, TypeScript, AWS Cdk, Pulumi, Amazon Virtual Private Cloud (VPC), Infrastructure Automation Frameworks, Bitbucket, CIS Benchmarks, Cloudwatch, Terraform, Serverless Computing - **Published:** September 25, 2026 - **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/senior-software-engineer-aws-cloud-infrastructure/11362459 ## About the Role * Senior-level software engineering experience, with substantial hands-on experience building and operating production systems on AWS. * Strong full-stack engineering capability in TypeScript and Python, including APIs, services, tooling, and cloud automation. * Deep experience with core AWS services used in enterprise environments, including IAM, Organizations, VPC, EC2, ECS/EKS or Lambda, S3, RDS/DynamoDB, CloudWatch, KMS, Config, and GuardDuty. * Proven ability to design and operate AWS governance at scale, including multi-account strategy, policy guardrails, access control, security standards, and operational controls. * Strong AWS networking fundamentals, including VPNs, peering, Transit Gateway, routing, DNS, and hybrid connectivity. * Experience with enterprise SSO; Microsoft Entra ID (Azure AD) federation into AWS is strongly preferred, including SAML/OIDC, IAM Identity Center, application and role mapping, and access lifecycle practices. * Experience working in regulated or audit-ready environments, with strong habits around change control, evidence and traceability, least privilege, and durable controls. * Demonstrated operational ownership: able to establish meaningful alerts and monitors, reduce noise, improve reliability, respond to incidents, and turn operational learnings into engineering improvements. * Strong Infrastructure as Code experience; Pulumi and/or SST strongly preferred. Terraform or AWS CDK experience is transferable and welcome. * Experience with Bitbucket Pipelines and/or GitHub Actions. * Proficient with modern AI coding and productivity tools, with the judgment to validate outputs, test changes, manage risk, and maintain production quality. * The physical and mental requirements of our roles include but are not limited to regular use of a computer, devices or other office equipment, clear communication, and occasional movement. You'll need comfort with screen work, basic hand coordination, and focus. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions. ## Description You will own and shape how Praxis designs, governs, secures, and operates AWS at scale-from account structure and identity to the platforms and applications that run on them. You will be a hands-on builder, using your depth in cloud infrastructure and software engineering to create secure, reliable systems that enable our teams to move quickly. You will work at the intersection of software engineering, cloud infrastructure, security, and operations. You will build and improve the systems that keep our teams moving fast while maintaining high standards for reliability, security, and compliance. You will work primarily in TypeScript and Python, use modern AI tooling as part of your daily engineering workflow, and take direct accountability for production operations, including on-call. You will be expected to see problems, take ownership, and drive them through resolution. You will move quickly through incremental, well-controlled changes, question assumptions when there is a better path, and turn operational learnings into durable improvements. Just as importantly, you will raise the bar for the people and systems around you by sharing what you know, communicating clearly, and helping the broader team build and operate better. Primary Responsibilities * Own and evolve AWS architecture for enterprise workloads, including multi-account foundations, landing zone / Control Tower patterns, networking, security baselines, and shared platforms. * Establish and continuously improve AWS governance, including organizational structure, SCPs, tagging, cost controls, compliance, audit readiness, and durable operational standards. * Design and operate identity and access across AWS, including IAM, IAM Identity Center, and Microsoft Entra ID integrations for SSO, federation, role mapping, access reviews, and least-privilege access. * Build, harden, and operate AWS platforms and full-stack services using TypeScript and Python, including compute, containers, serverless, data stores, messaging, and cloud automation as needed. * Drive operational excellence across AWS platforms and workloads by building effective monitoring, alerting, dashboards, SLOs/SLIs, runbooks, incident response practices, and durable fixes to recurring problems; participate in the on-call rotation and own incidents through resolution and learning. * Automate infrastructure and delivery through Infrastructure as Code-preferably Pulumi and/or SST-and CI/CD using Bitbucket Pipelines and/or GitHub Actions, with an emphasis on safe, incremental delivery and low blast radius. * Partner across engineering and IT to translate needs into secure, maintainable solutions, improve production readiness and operational practices, mentor other engineers, and use sound judgment to move fast without breaking things., Coordinate end-to-end installation projects for customers by tracking progress, scheduling within SLAs, documenting interactions, resolving work order issues, and communicating with customers, service providers, stores and vendors. Maintain compliance documentation, use systems (Installation Management System, myRedVest, Salesforce), deliver customer support via inbound/outbound calls, and adapt to process changes while meeting performance goals. Top Skills: Installation Management SystemMyredvestSalesforce What you need to know about the Colorado Tech Scene With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation. Key Facts About Colorado Tech * Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey) * Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3 * Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech * Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook) * Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures * Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute ## Related Videos - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Why segmenting your infrastructure into tiers makes your infrastructure design better](https://www.wearedevelopers.com/videos/1960-why-segmenting-your-infrastructure-into-tiers-makes-your-infrastructure-design-better) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)