> Markdown version of [/jobs/ext/4008686-aws-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/4008686-aws-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AWS Cloud Engineer

- **Company:** Intellisoft Inc
- **Location:** Los Gatos, CA, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** Amazon Web Services, Cloud Engineering, Domain Name System (DNS), Identity and Access Management, IP Routing, Subnetting, JSON, OpenID, Security Assertion Markup Language (SAML), Amazon Virtual Private Cloud (VPC), Route53, Terraform
- **Published:** October 29, 2026
- **Apply:** https://www.thejobnetwork.com/job/75d785f1-1622-4899-ac9a-3b76bf76276e/aws-cloud-engineer

## About the Role

Position OverviewFieldDetailsTitleCloud Engineer - AWSLevelMid-LevelExperience3-5 years Cloud Engineering, 2 years AWSEducationBachelor's in CS/IT or related fieldCertificationsAWS Solutions Architect Associate (preferred)Technical Requirements
AWS Networking
General understanding of VPC architecture, subnets, route tables, and internet/NAT gateways
Familiarity with Transit Gateway connectivity and multi-account networking patterns
Understanding of NACLs and Security Groups and how they interact at different layers
Experience with DNS resolution (Route 53) in multi-account environments
IAM & Identity Management
IAM policy authoring (JSON), permission boundaries, and cross-account role assumption
Understanding of how IAM policies, SCPs, and permission boundaries interact and evaluate
Experience with federated access patterns and temporary credentials (STS)
SSO Technologies
Prior experience with SSO technologies (SAML, OIDC)
Familiarity with AWS IAM Identity Center configuration and assignment
Understanding of external IdP integration patterns
Service Control Policies (SCPs)
Author and manage SCPs across AWS Organizations (deny-list/allow-list strategies)
Implement region restrictions, service restrictions, root lockdown, and encryption enforcement
Understand SCP inheritance, limitations, and testing without production disruption
Account Factory for Terraform (AFT)