Cloud Engineer Lead in Iselin

n

We are looking for a hands-on AWS DevOps Lead to own and evolve our cloud platform and lead a blended onsite and offshore team of 5-10 engineers. You will set the vision and roadmap for AWS infrastructure, DevOps, and CI/CD, while staying technical enough to design, build, and troubleshoot the platform yourself.

\n

As part of the Platforms & Engineering team, you will partner with IT stakeholders to cloud-enable their systems, keep our AWS environment secure and well governed, and make sure the team delivers reliably. This role suits a leader who is equally comfortable whiteboarding a multi-account network design, reviewing a pipeline, and running a team stand-up.

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience. \n

• 10+ years in infrastructure, cloud, or DevOps engineering, with 5+ years of hands-on AWS experience. \n

• 3+ years leading technical teams, including managing contractors and onsite/offshore delivery. \n

• Deep expertise in AWS networking: VPC design, Transit Gateway, hybrid connectivity, DNS, and routing. \n

• Strong hands-on experience with core AWS compute, storage, database, and serverless services. \n

• Proven experience with Infrastructure as Code (Terraform/Terragrunt, CloudFormation, or CDK). \n

• Strong background in GitHub administration, GitHub Actions, and CI/CD pipeline design. \n

• Solid knowledge of AWS security services, IAM, and cloud security best practices. \n

• Scripting skills in Python, Bash, or PowerShell. \n

• Experience with containers and orchestration (Docker, ECS and/or EKS). \n

• Excellent communication skills and the ability to influence technical and non-technical stakeholders. \n

• Exposure to FinOps practices and cloud cost management tools. \n, * Experience with Amazon Bedrock and integrating generative AI services into enterprise platforms and applications. \n

• Familiarity with AI/ML infrastructure on AWS, such as SageMaker, vector stores, and secure model access patterns. \n

• AWS certifications such as Solutions Architect - Professional, DevOps Engineer - Professional, Advanced Networking - Specialty, or Security - Specialty. \n

• Experience in regulated industries such as financial services or insurance. \n

• Knowledge of security and compliance frameworks such as NIST, CIS Benchmarks, SOC 2 or ISO 27001. \n

n \n

• Define the vision, roadmap, and standards for AWS infrastructure, DevOps, and CI/CD across the Platforms & Engineering team. \n

• Lead, mentor and grow a team of 5-10 FTEs and contractors across onsite and offshore locations. \n

• Plan and assign work, set priorities, track delivery and remove blockers so commitments are met on time. \n

• Build a culture of automation, ownership, documentation and continuous improvement. \n

• Manage contractor and vendor resources, including onboarding, quality of delivery and knowledge transfer. \n

\n

AWS infrastructure and architecture

\n \n

• Design, build and maintain secure, scalable and cost-effective AWS environments using services such as EC2, ECS/EKS, Lambda, S3, RDS, IAM, CloudWatch and CloudFormation. \n

• Own the AWS network architecture: VPC design, subnets, routing, Transit Gateway, VPC peering, PrivateLink, Direct Connect / site-to-site VPN, DNS (Route 53), load balancing, and hybrid connectivity. \n

• Drive Infrastructure as Code (Terraform/Terragrunt and/or CloudFormation/CDK) as the standard for all provisioning. \n

• Hands-on experience authoring Terraform modules from scratch, not just consuming existing ones. \n

• Lead multi-account strategy and governance using AWS Organizations, Control Tower, and landing zone patterns. \n

• Ensure high availability, disaster recovery, backup, and resilience of cloud workloads. \n

• Monitor and optimize cloud spend through tagging, rightsizing and FinOps practices. \n

\n

DevOps, GitHub and CI/CD

\n \n

• Own GitHub administration: organizations, repositories, branching strategy, access controls and GitHub Actions. \n

• Design and maintain CI/CD pipelines that deliver fast, repeatable and secure releases. \n

• Standardize build, test, deployment, and release practices across teams. \n

• Implement observability: monitoring, logging, alerting, and incident response runbooks. \n

\n

Cloud security

\n \n

• Embed security in every layer of the AWS platform, working with the Cybersecurity team. \n

• Implement and manage IAM least-privilege, SCPs, KMS encryption, Secrets Manager, Security Groups, and NACLs. \n

• Use AWS security services such as GuardDuty, Security Hub, AWS Config, CloudTrail, Inspector, and WAF. \n

• Integrate DevSecOps practices into pipelines, including code, dependency, container and IaC scanning. \n

• Support audits, compliance requirements and remediation of security findings. \n

\n

Stakeholder partnership

\n \n

• Work closely with IT stakeholders and application owners to migrate, cloud-enable, and support their systems on AWS. \n

• Translate business and application needs into infrastructure designs, estimates, and delivery plans. \n

• Communicate status, risks, and roadmap clearly to senior leadership and partner teams. \n

\n