AWS Platform Engineer

Our Client, a Health Insurance company, is looking for an AWS Platform Engineer for their Reston, VA location., * Lead hands-on remediation of AWS cloud security vulnerabilities, misconfigurations, compliance gaps, and platform risks across production and non-production environments.

• Review security findings from AWS-native and enterprise security tools, determine remediation approach, implement fixes, and validate successful closure.
• Communicate architectural decisions, remediation plans, goals, strategies, and short-term trade-offs versus long-term commitments, risk reduction, and cost impacts.
• Engage in and improve the end-to-end lifecycle of cloud services, starting from inception and design through deployment, operations, monitoring, and continuous security improvement.
• Establish automation capabilities leveraging AWS-native services, infrastructure as code, policy as code, and CI/CD pipelines to improve developer experience and reduce recurring vulnerabilities.
• Support activities including system design consulting, secure platform engineering, software platforms and frameworks, capacity planning, launch reviews, and operational readiness reviews.
• Troubleshoot difficult cloud security, infrastructure, and application platform issues and engage customers and stakeholders to drive timely remediation.
• Learn and apply new AWS services, security capabilities, and engineering practices as required.
• Improve system scalability, sustainability, reliability, and security through automation, repeatable patterns, and engineering standards.
• Support enterprise cloud transformation, migration, modernization, and security posture improvement efforts.
• Guide customers on cloud-native design, secure architecture patterns, AWS security controls, and platform guardrails.
• Provide consultation on technology infrastructure planning, security remediation, and engineering for assigned systems; assess the implications of technology strategies on infrastructure capabilities and risk posture.
• Establish strategies to migrate legacy applications to secure, cloud-native patterns, including microservices hosted on AWS Cloud.
• Leverage cloud-native architecture components including containers, immutable infrastructure, microservices, service mesh, serverless capabilities, and managed AWS services to build highly available, fault-tolerant, and secure applications.
• Conduct research on global technology, cloud security, and platform engineering trends and their applicability to FEPOC products in support of internal development teams and business initiatives.
• Promote modern application design, engineering best practices, secure-by-design patterns, vulnerability mitigation, and lifecycle risk management.
• Monitor and manage stability, availability, performance, and security of enterprise systems and platforms across IT domains.
• Analyze systems, network, storage, cloud, and security telemetry to identify problems, trends, vulnerabilities, and opportunities for improvement.
• Automate end-to-end processes to maintain, patch, upgrade, harden, and secure the AWS cloud ecosystem.
• Make data-driven recommendations and decisions that improve the overall efficacy, efficiency, security, and reliability of software delivery and cloud platform capabilities.
• Mentor peers and engage across teams to socialize solutions, improve security practices, and increase engineering maturity.

• Cloud Security and Vulnerability Remediation: AWS security services, vulnerability management, configuration compliance, security guardrails, threat detection, IAM hardening, encryption, logging, monitoring, patching, and secure cloud engineering.
• Development: Experience programming with one or more languages, including Python, Java, Groovy, or Go.
• IaC Tools for Platform Automation: Strong skills and experience in at least one of the following: Ansible, Terraform, AWS CloudFormation, or AWS CDK.
• Containers: Docker or other OCI-certified containers is a plus.
• Container Orchestration Platform: Experience with Kubernetes, AWS EKS, or AWS ECS is a plus.
• CNI Plugins: Calico, Flannel, Weave Net, or similar technologies.
• Service Mesh: Istio, AWS App Mesh, OpenShift Service Mesh, or similar technologies.
• Container Security Tools: Twist lock, Sysdig, Aqua, Prisma Cloud, or similar tools is a plus.
• Platform Monitoring, Observability, & Performance Tools: Nginx, New Relic, AppDynamics, Datadog, Thanos, Jaeger, LogDNA, CloudWatch, CloudTrail, AWS Config, and related observability tools.
• DevOps Tools: Git/Repo, Crucible, Bitbucket, Jira, Ansible, Puppet, Jenkins, ArgoCD, Bamboo, Maven, Artifactory, Nexus, and related tools.
• Understanding of cloud-native architecture and secure-by-design engineering principles.
• Linux, shell scripting, and general administration skills.
• Network, security, plugins, and storage skills.
• AWS skills: EC2, S3, EBS, EFS, IAM, VPC, Lambda, CloudTrail, CloudWatch, Config, GuardDuty, Inspector, Security Hub, KMS, Secrets Manager, WAF, and EKS.
• Cloud, security, and DevOps certifications, including AWS certification.
• AWS Cloud certification, minimum of one, is required.
• AWS Certified Security - Specialty, AWS Certified Solutions Architect, AWS Certified SysOps Administrator, or AWS Certified DevOps Engineer is preferred.