Description:
We are looking for an experienced Infrastructure as Code Engineer to design, build, and support secure AWS environments using AWS CDK with TypeScript across commercial and GovCloud-style multi-account architectures. This is a hands-on engineering role focused on practical cloud engineering, automation, troubleshooting, and delivery.
Responsibilities:
- Design, develop, and maintain infrastructure using AWS CDK with TypeScript, including reusable constructs, stacks, and deployment patterns
- Build and support multi-account AWS structures (Shared Services, Network, Security/Logging, Development, QA, Stage, and Production)
- Write and maintain AWS Lambda functions for automation, deployment, monitoring, and operational workflows
- Work with GitLab for source control, merge requests, CI/CD pipelines, and code review workflows
- Coordinate work through Jira with disciplined ticket tracking, branch naming, and merge request practices
- Troubleshoot cloud infrastructure issues using CloudWatch, CloudTrail, Config, VPC Flow Logs, and related observability tools
- Support serverless architectures, event-driven workflows, and container platforms such as ECS, EKS, or Kubernetes
- Enforce cloud security, IAM least privilege, logging, monitoring, tagging, and compliance-aligned infrastructure practices
- Work independently to identify gaps, propose improvements, and continue making progress without step-by-step direction
Requirements:
- Strong hands-on experience with AWS CDK using TypeScript
- Active AWS certification required (Solutions Architect strongly preferred)
- Experience working in AWS GovCloud or GovCloud-style environments with multi-account architecture
- Strong AWS experience, including IAM, VPCs, subnets, routing, security groups, CloudWatch, CloudTrail, Lambda, S3, and KMS
- Experience using GitLab for source control and CI/CD workflows
- Experience working from Jira tickets in a structured engineering environment
- Strong troubleshooting skills in production cloud environments
- Ability to read existing infrastructure code, understand intent, improve it, and safely extend it
- US citizen, able to obtain a security clearance
Preferred:
- Experience with AWS Organizations, Control Tower, or Landing Zone Accelerator
- Experience with AWS GovCloud compliance environments, including CMMC, FedRAMP, IL4, or IL5
- Experience with networking in AWS, including Transit Gateway, VPC peering, private endpoints, NAT, and DNS
- Experience with CloudFormation, Terraform, or other IaC tools in addition to CDK
- Experience supporting production cloud environments with observability, alerting, and operational dashboards
Pay: $120,000.00 - $150,000.00 per year
Application Question(s):
- Do you have hands-on professional experience with AWS CDK using TypeScript? CloudFormation or Terraform alone does not qualify.
- Are you a US citizen able to obtain a security clearance?
Work Location: Remote
