AWS Cloud Infrastructure Engineer

Role: The Cloud Infrastructure Engineer is an experienced individual contributor responsible for designing, implementing, and operating secure, scalable, and highly available AWS infrastructure supporting a production-grade, multi-account B2B SaaS platform in the financial services industry. This role is critical to maintaining platform resilience, security, automation maturity, and operational excellence across production and non-production environments. The engineer operates with moderate autonomy, owning defined areas of the AWS environment while contributing to infrastructure standards, reliability engineering, and security best practices.

Responsibilities

• Design, build, and maintain AWS infrastructure across production and non-production environments
• Support application deployments and underlying platform services required for reliable operation
• Implement and manage infrastructure using Infrastructure as Code (Terraform)
• Configure and maintain AWS services including compute, storage, networking, and managed services
• Monitor infrastructure health, availability, and performance; respond to incidents and perform root cause analysis
• Partner with application engineering and security teams to support system reliability and scalability
• Implement and maintain backup, disaster recovery, and high-availability solutions
• Support automation related to infrastructure provisioning and application deployments
• Manage IAM roles, permissions, and access controls in alignment with security policies
• Contribute to cloud cost monitoring and optimization efforts
• Maintain documentation, runbooks, and operational procedures
• Participate in on-call or incident response rotations as required

Core AWS & Cloud Technologies

Compute & Containers

• Amazon ECS (Elastic Container Service)
• Amazon EC2
• Amazon ECR (Elastic Container Registry)
• AWS Lambda (event-driven workloads)

Networking & Edge

• Amazon VPC (multi-AZ design, subnet segmentation)
• Internet Gateway (IGW)
• VPC Peering
• Elastic Load Balancing (ALB)
• AWS WAF
• Amazon Route 53
• AWS Data Transfer optimization

Databases & Caching

• Amazon RDS (PostgreSQL) and PSQL
• Amazon DocumentDB (MongoDB compatibility)
• Amazon ElastiCache (Redis)

Messaging & Streaming

• Amazon MSK (Managed Streaming for Apache Kafka)

Security & Compliance

• AWS IAM
• AWS KMS
• AWS Secrets Manager
• AWS Config
• AWS CloudTrail
• Amazon GuardDuty
• Amazon Inspector
• AWS WAF
• Auth0

Monitoring & Observability

• Amazon CloudWatch (metrics, logs, alarms, events)

CI/CD & DevOps

• CircleCI
• BitBucket
• Github
• Infrastructure as Code (Terraform)

Storage & Data Lifecycle

• Amazon S3
• Amazon S3 Glacier Deep Archive

Managed Platform Services

• AWS Transfer Family
• Amazon WorkSpaces (administrative environments)

Skills and Experience

• Strong hands-on experience operating production AWS environments in a multi-account architecture.
• Deep experience with containerized platforms (ECS) and distributed system design.
• Proven experience managing relational and document databases in high-availability configurations.
• Strong understanding of secure VPC architecture, ingress/egress control, and network isolation strategies.
• Experience operating Kafka-based streaming architectures (MSK).
• Expertise implementing infrastructure as code using Terraform.
• Experience building and maintaining CI/CD pipelines for containerized workloads.
• Strong knowledge of IAM design, encryption practices, and secrets management.
• Experience implementing monitoring, alerting, and log aggregation for production systems.
• Ability to troubleshoot performance, networking, scaling, and availability issues across distributed systems.
• Experience supporting regulated or compliance-sensitive environments (e.g., financial services).
• Demonstrated ability to leverage AI-assisted development tools (e.g., Cursor, ChatGPT) to accelerate infrastructure automation, troubleshooting, documentation, and code development while maintaining security and compliance standards.
• Strong judgment in the responsible use of AI tools to enhance productivity, improve code quality, and streamline operational workflows within regulated environments.
• Strong collaboration, documentation, and communication skills.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent practical experience.
• 4–6 years of experience in cloud infrastructure, platform engineering, or systems engineering roles.
• AWS certification (e.g., AWS Certified Solutions Architect – Associate, SysOps Administrator, or equivalent) preferred.

Integrity and Ethics

All StarCompliance employees are expected to commit to a high standard of personal integrity and carry out their responsibilities in an ethical manner