AWS Infrastructure Automation Engineer
Role details
Job location
Tech stack
Job description
CGI is seeking a Senior AWS Infrastructure & Network Automation Engineer to design, build, and support automated networking and network security capabilities within secure, mission critical AWS environments., This role is part of a Software Defined Networking team responsible for automating infrastructure functions such as network provisioning, routing, security group management, flow log enrichment, and the deployment of new AWS networking services. The engineer will develop Python based automation, create reusable Infrastructure as Code solutions, and build deployment pipelines using AWS native services., This role is part of a Software Defined Networking team responsible for automating infrastructure functions such as network provisioning, routing, security group management, flow log enrichment, and the deployment of new AWS networking services. The engineer will develop Python based automation, create reusable Infrastructure as Code solutions, and build deployment pipelines using AWS native services.
The successful candidate will have strong hands on knowledge of AWS networking, cloud infrastructure, and network security. This is not a GenAI, web application development, or traditional full stack engineering position. The work is centered on infrastructure engineering, network automation, and the reliable operation of cloud platforms in a regulated financial services environment., Develop Python scripts and services that automate infrastructure provisioning, configuration, validation, and operational support.
. Build and maintain AWS environments, including accounts, VPCs, subnets, routing configurations, security groups, and network access controls.
. Create reusable infrastructure components using CloudFormation and other Infrastructure as Code tools.
. Develop event driven automation using services such as Lambda, DynamoDB, SNS, SQS, and EventBridge.
. Build and support deployment pipelines using AWS CodeCommit, CodeBuild, and CodePipeline.
. Automate routing, security group administration, network provisioning, flow log enrichment, and related security functions.
. Engineer resilient, highly available solutions with appropriate failover, recovery, and fault tolerance strategies.
. Integrate cloud networking solutions with existing enterprise platforms and services.
. Troubleshoot complex infrastructure, connectivity, security, and deployment issues.
. Apply cloud security, identity and access management, encryption, and compliance standards.
. Produce clear technical documentation, implementation guidance, and operational procedures.
. Work closely with engineering, security, operations, and business teams in an Agile delivery environment.
. Promote practical cloud engineering standards and continuous improvement across the team.
Requirements
5+ years of hands on experience engineering cloud platforms
. Strong hands on experience with AWS infrastructure engineering and automation in enterprise or mission critical environments.
. Solid understanding of networking fundamentals, including IP addressing, CIDR notation, subnetting, routing, DNS, load balancing, and connectivity patterns.
. Practical experience designing and supporting AWS VPCs, subnets, route tables, security groups, Network ACLs, and related network security controls.
. Strong Python development skills, specifically for infrastructure, networking, security, or operational automation.
. Experience using AWS Lambda to build serverless automation and event driven workflows.
. Hands on experience with DynamoDB and its use within AWS automation solutions.
. Experience with AWS messaging and event services such as SNS, SQS, and EventBridge.
. Working knowledge of ECS, containers, and container based deployment patterns.
. Strong experience with AWS CloudFormation, including the creation and maintenance of reusable templates.
. Experience with Infrastructure as Code formats and tools such as Terraform, JSON, and YAML.
. Experience building CI/CD pipelines with AWS CodeCommit, CodeBuild, and CodePipeline.
. Ability to automate network provisioning, routing changes, security group management, logging, and network security processes.
. Understanding of cloud identity, access management, encryption, secure configuration, and least privilege principles.
. Experience designing resilient and highly available platforms, including failover and recovery strategies.
. Ability to troubleshoot complex AWS networking, connectivity, deployment, and infrastructure issues.
. Familiarity with Shell scripting and AWS Step Functions is beneficial.
. Experience working within Agile engineering teams.
. Strong written communication and technical documentation skills.
. Ability to work effectively across cloud, networking, cybersecurity, platform engineering, and operations teams.
. Experience in financial services or another highly regulated industry is preferred.
. Demonstrate genuine infrastructure and networking experience rather than primarily application development, GenAI, LLM, or web framework experience.
Desired Skillset
. Current AWS cloud certification is required and must be validated before candidate submission.
. Relevant certifications may include: AWS Certified Solutions Architect AWS Certified Advanced Networking AWS Certified DevOps Engineer AWS Certified Security
. Networking or security certifications are beneficial but not explicitly required.
. Candidates should also have substantial practical experience with AWS infrastructure automation, cloud networking, and network security. Experience should reflect direct engineering and implementation work rather than primarily high level architecture, application development, or GenAI initiatives., Bachelor's degree in Computer Science, Information Technology, Engineering, Network Engineering, or a related discipline, or equivalent professional experience., * Agile
- Amazon Web Services Cloud
- Communication
- Python
- Shell Script
- Terraform
Benefits & conditions
CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $110,100.00 $156,700.00.
CGI's benefits are offered to eligible professionals on their first day of employment to include: . Competitive compensation . Comprehensive insurance options . Matching contributions through the 401(k) plan and the share purchase plan . Paid time off for vacation, holidays, and sick time . Paid parental leave .Learning opportunities and tuition assistance . Wellness and Well being programs