AWS Cloud Infrastructure Engineer

Role: The Cloud Infrastructure Engineer is an experienced individual contributor responsible for designing, implementing, and operating secure, scalable, and highly available AWS infrastructure supporting a production-grade, multi-account B2B SaaS platform in the financial services industry. This role is critical to maintaining platform resilience, security, automation maturity, and operational excellence across production and non-production environments. The engineer operates with moderate autonomy, owning defined areas of the AWS environment while contributing to infrastructure standards, reliability engineering, and security best practices.

Responsibilities

• Design, build, and maintain AWS infrastructure across production and non-production environments

• Support application deployments and underlying platform services required for reliable operation

• Implement and manage infrastructure using Infrastructure as Code (Terraform)

• Configure and maintain AWS services including compute, storage, networking, and managed services

• Monitor infrastructure health, availability, and performance; respond to incidents and perform root cause analysis

• Partner with application engineering and security teams to support system reliability and scalability

• Implement and maintain backup, disaster recovery, and high-availability solutions

• Support automation related to infrastructure provisioning and application deployments

• Manage IAM roles, permissions, and access controls in alignment with security policies

• Contribute to cloud cost monitoring and optimization efforts

• Maintain documentation, runbooks, and operational procedures

• Participate in on-call or incident response rotations as required

Core AWS & Cloud Technologies

Compute & Containers

• Amazon ECS (Elastic Container Service)

• Amazon EC2

• Amazon ECR (Elastic Container Registry)

• AWS Lambda (event-driven workloads)

Networking & Edge

• Amazon VPC (multi-AZ design, subnet segmentation)

• Internet Gateway (IGW)

• VPC Peering

• Elastic Load Balancing (ALB)

• AWS WAF

• Amazon Route 53

• AWS Data Transfer optimization

Databases & Caching

• Amazon RDS (PostgreSQL) and PSQL

• Amazon DocumentDB (MongoDB compatibility)

• Amazon ElastiCache (Redis)

Messaging & Streaming

• Amazon MSK (Managed Streaming for Apache Kafka)

Security & Compliance

• AWS IAM

• AWS KMS

• AWS Secrets Manager

• AWS Config

• AWS CloudTrail

• Amazon GuardDuty

• Amazon Inspector

• AWS WAF

• Auth0

Monitoring & Observability

• Amazon CloudWatch (metrics, logs, alarms, events)

CI/CD & DevOps

• CircleCI

• BitBucket

• Github

• Infrastructure as Code (Terraform)

Storage & Data Lifecycle

• Amazon S3

• Amazon S3 Glacier Deep Archive

Managed Platform Services

• AWS Transfer Family

• Amazon WorkSpaces (administrative environments)

Skills and Experience • Strong hands-on experience operating production AWS environments in a multi-account architecture.

• Deep experience with containerized platforms (ECS) and distributed system design.

• Proven experience managing relational and document databases in high-availability configurations.

• Strong understanding of secure VPC architecture, ingress/egress control, and network isolation strategies.

• Experience operating Kafka-based streaming architectures (MSK).

• Expertise implementing infrastructure as code using Terraform.

• Experience building and maintaining CI/CD pipelines for containerized workloads.

• Strong knowledge of IAM design, encryption practices, and secrets management.

• Experience implementing monitoring, alerting, and log aggregation for production systems.

• Ability to troubleshoot performance, networking, scaling, and availability issues across distributed systems.

• Experience supporting regulated or compliance-sensitive environments (e.g., financial services).

• Demonstrated ability to leverage AI-assisted development tools (e.g., Cursor, ChatGPT) to accelerate infrastructure automation, troubleshooting, documentation, and code development while maintaining security and compliance standards.

• Strong judgment in the responsible use of AI tools to enhance productivity, improve code quality, and streamline operational workflows within regulated environments.

• Strong collaboration, documentation, and communication skills.

Minimum Qualifications • Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent practical experience.

• 4–6 years of experience in cloud infrastructure, platform engineering, or systems engineering roles.

• AWS certification (e.g., AWS Certified Solutions Architect – Associate, SysOps Administrator, or equivalent) preferred.

Integrity and Ethics

• All StarCompliance employees are expected to commit to a high standard of personal integrity and carry out their responsibilities in an ethical manner