Kerja Sepenuh Masa, AWS Cloud Engineer di Ironbook AI Federal Territory - Maukerja

Role summary: The AWS Cloud Engineer designs, builds, secures and operates cloud infrastructure, network connectivity, CI/CD pipelines and security controls for containerised applications running on AWS, including EKS-hosted workloads. The role owns the full path from code commit to production, and keeps the environment compliant and secure at every stage.

Key Responsibilities

Cloud Infrastructure

• Design and deploy scalable, highly available AWS architectures across multiple accounts and Availability Zones.
• Build and operate EKS clusters, ECR repositories, and container workloads using Helm and GitOps practices.
• Provision and manage infrastructure as code with Terraform or AWS CDK.
• Migrate workloads to AWS, including batch processing (AWS Batch, Lambda) and relational databases (Aurora, RDS).
• Monitor, tune and optimise cost and performance with CloudWatch and cost management tooling.

Network Engineering

• Design VPC layouts, subnets, route tables and multi-account connectivity using Transit Gateway and PrivateLink.
• Establish and maintain hybrid connectivity through Site-to-Site VPN and Direct Connect.
• Configure DNS, load balancing and content delivery using Route 53, ALB/NLB and CloudFront.
• Enforce network security through security groups, NACLs and AWS Network Firewall.
• Troubleshoot routing, latency and connectivity issues across BGP, TCP/IP and IPSec paths.

DevSecOps and CI/CD

• Build and maintain CI/CD pipelines that build, test, scan and deploy workloads to non-production and production environments.
• Integrate security checks into pipelines, including dependency scanning, container image scanning and infrastructure policy checks.
• Manage secrets and credentials securely using Secrets Manager and KMS, with IAM roles for service accounts.
• Automate deployment, rollback and environment provisioning.

Cloud Security

• Define and enforce identity and access controls using IAM, IAM Identity Center, AWS Organizations and service control policies.
• Monitor and respond to threats using GuardDuty, Security Hub, AWS Config and CloudTrail.
• Protect data with encryption at rest and in transit, using KMS and related controls.
• Secure public-facing services with AWS WAF and Shield.
• Maintain alignment with CIS benchmarks and relevant compliance frameworks (for example ISO 27001 or PCI DSS).
• Support incident response, security investigations and audit evidence collection.

Documentation and Collaboration

• Produce architecture diagrams, runbooks, and security and network standards.
• Work with application, database and security teams to translate requirements into secure, supportable designs.
• Mentor junior engineers and contribute to team standards and knowledge sharing.

Required Skills

• Cloud: EC2, EKS, ECS, Lambda, AWS Batch, S3, Aurora/RDS, CloudWatch; Docker, Kubernetes, Helm, ECR
• Networking: VPC design, Transit Gateway, PrivateLink, Site-to-Site VPN, Direct Connect, Route 53, ALB/NLB
• DevSecOps: GitHub Actions, GitLab CI or AWS CodePipeline; Terraform or CDK; policy-as-code
• Security: IAM, AWS Organizations and SCPs, KMS, Secrets Manager, GuardDuty, Security Hub, WAF, CIS benchmarks
• Scripting: Python, Bash or PowerShell

Experience and Qualifications

• 5+ years in cloud, infrastructure, network or security engineering
• 3+ years hands-on with AWS in production environments
• Experience designing and operating containerised workloads on Kubernetes
• Proven delivery of CI/CD pipelines in a team environment
• Degree in Computer Science, Engineering or equivalent practical experience

Certifications

• Required: AWS Solutions Architect – Associate (or higher)

Personal Attributes

• Strong troubleshooting and analytical skills
• Clear written and verbal communication with technical and non-technical audiences
• Ownership mindset, with a focus on security and reliability
• Comfortable working across time zones with partner teams