Cloud Infrastructure Engineer

Role Overview

We are seeking an experienced Cloud Infrastructure Engineer to design, implement, and secure AWS

cloud environments supporting large-scale data platforms. The role will focus on infrastructure

provisioning, networking, security, automation, and governance within highly regulated environments.

Note: Resources for this role are required to be onshore due to the classified nature of the

environment.

Key Responsibilities

Design and provision AWS environments including VPCs, subnets, security groups, network ACLs,

IAM roles, and encryption services.

Implement and manage AWS Lake Formation infrastructure, data catalogs, permissions, and

cross-account resource sharing.

Build and maintain CI/CD pipelines integrated with SHIP-HATS and enterprise deployment

frameworks.

Configure secure cross-agency connectivity using VPC Peering, Transit Gateway, and AWS

PrivateLink.

Develop monitoring and governance capabilities using Amazon CloudWatch, AWS CloudTrail,

and AWS Config.

Implement role-based access control (RBAC), tag-based access control (TBAC), and fine-grained

permissions frameworks.

Provision and maintain development, testing, and pre-production environments aligned with

production architecture.

Implement security best practices including encryption at rest, encryption in transit, VPC

endpoints, and secure access controls.

Collaborate with technical leadership on reusable infrastructure patterns and deployment

standards.

Produce architecture documentation, infrastructure diagrams, operational runbooks, and code

repositories.

Participate in Agile ceremonies, sprint demos, and infrastructure design reviews.

Required Skills & Experience

5+ years of experience in Cloud Infrastructure Engineering or Cloud Platform Engineering.

Strong expertise in AWS networking including VPCs, Transit Gateway, PrivateLink, Security

Groups, and IAM.

Hands-on experience with Terraform, AWS CDK, or CloudFormation.

Experience building and managing CI/CD pipelines using GitLab CI, AWS CodePipeline, or similar

tools.

Strong understanding of Linux administration and cloud security best practices.

Experience implementing encryption, governance, and compliance controls in enterprise

environments.

Knowledge of Infrastructure as Code, automation, and cloud operational excellence principles.

1 Good to Have

Hands-on experience with SHIP-HATS (highly preferred).

Experience with AWS Lake Formation cross-account architecture.

Experience with Transit Gateway and large-scale multi-account AWS environments.

Prior experience supporting Government Agencies, IMDA, or Public Sector cloud programs.

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline.

Pay: $5,000.00 - $11,358.50 per month

Work Location: In person