AWS Cloud Infrastructure Engineer

Administer and improve AWS infrastructure across multiple accounts: EC2, RDS, S3, VPC/Transit Gateway, Route 53, Elastic Beanstalk, IAM/IAM Identity Center, CloudFormation, Systems Manager, CloudWatch, and CloudTrail. Plan and execute migrations between accounts, regions, and platforms with minimal customer disruption. Administer SQL Server on both RDS and EC2: backup/restore, upgrades, permissions, performance troubleshooting, and migration work. Manage Windows Server and IIS hosting, including SSL/TLS certificate lifecycle, bindings, and renewals. Write and maintain PowerShell and AWS CLI automation for recurring operational work. Build and maintain automated deployment processes for internal and customer-facing releases. Maintain and extend CloudFormation templates for repeatable, consistent resource provisioning. Investigate and resolve infrastructure incidents end to end and produce clear internal documentation and runbooks afterward. Monitor and report on cloud spend; identify and implement savings opportunities. Support security findings for remediation, access reviews, and evidence gathering for SOC 2. Interface directly with hosted customers during project deployments, networking and connectivity questions, and pre-sales technical discussions about our hosted platform. Provide escalation support to internal teams for infrastructure-related issues. Desired Candidate Profile 2 3+ years of hands-on, direct AWS experience in a production environment day-to-day console and CLI work, not adjacent exposure through a managed provider. Working knowledge across core AWS services: EC2, VPC and networking, RDS, S3, IAM, CloudWatch, and at least one infrastructure-as-code or deployment tool. Solid Windows Server administration experience, including IIS. SQL Server administration

Experience

backups, restores, logins and permissions, and basic performance troubleshooting. Practical PowerShell scripting ability you can automate a repetitive task without turning it into a framework. Comfort with certificate management, DNS, and general network troubleshooting. Clear written communication. You'll document what you build and explain it to both engineers and non-technical stakeholders. Ability to work directly with customers professionally and calmly, including during incidents. Nice to Have Experience with AWS Control Tower, Landing Zone Accelerator, or multi-account organizational structures. Security Hub, GuardDuty, Inspector, or similar security tooling experience. Octopus Deploy, or comparable release automation (Azure DevOps, TeamCity, Jenkins). AWS cost management experience (Cost Explorer, budgets, Savings Plans/RIs). Exposure to SOC 2 or similar compliance programs. AWS certification (Solutions Architect Associate, SysOps Administrator, or equivalent). SaaS or MSP background where infrastructure directly serves external customers.