Kerja Sepenuh Masa, AWS Cloud Engineer di Collabera Federal Territory - Maukerja

Job Overview

• Job Title: AWS Cloud Engineer (Networking, DevSecOps & Security)
• Overall Experience: 5+ Years
• Relevant AWS Experience: 3+ Years
• Mandatory Certification: AWS Solutions Architect – Associate or higher

Role Summary

The AWS Cloud Engineer will be responsible for designing, implementing, securing, and managing AWS cloud infrastructure, networking, CI/CD pipelines, and security controls for containerised applications, including EKS workloads. The role requires strong hands-on expertise in AWS Networking, DevSecOps, and Cloud Security to ensure scalable, secure, and highly available cloud environments.

Key Responsibilities

• Design, deploy, and manage scalable, highly available AWS cloud infrastructure.
• Manage AWS EKS, ECR, Docker, Kubernetes, Helm, and containerised workloads.
• Implement Infrastructure as Code (IaC) using Terraform or AWS CDK.
• Design and manage AWS networking, including VPC, Transit Gateway, PrivateLink, VPN, Direct Connect, Route 53, and load balancers.
• Build and maintain CI/CD pipelines using GitHub Actions, GitLab CI, or AWS CodePipeline.
• Implement DevSecOps practices, including automated security scanning, vulnerability checks, and deployment automation.
• Manage AWS security controls, including IAM, KMS, Secrets Manager, GuardDuty, Security Hub, WAF, and SCPs.
• Ensure cloud security, compliance, monitoring, performance, and cost optimisation.
• Troubleshoot cloud infrastructure, networking, and security-related issues.
• Develop technical documentation, architecture diagrams, and operational runbooks.
• Collaborate with cross-functional teams and provide technical guidance to junior engineers.

Required Skills

1. AWS Cloud & Infrastructure

• AWS EC2, EKS, ECS, Lambda, AWS Batch, S3, Aurora/RDS, CloudWatch.
• Docker, Kubernetes, Helm, and ECR.

2. AWS Networking

• VPC, Subnets, Route Tables, Transit Gateway, PrivateLink.
• Site-to-Site VPN, Direct Connect, Route 53.
• ALB/NLB, CloudFront, BGP, TCP/IP, and IPSec.

3. DevSecOps & CI/CD

• GitHub Actions, GitLab CI, or AWS CodePipeline.
• Terraform or AWS CDK.
• Infrastructure as Code (IaC), Policy as Code, and GitOps.
• Dependency and container image scanning.

4. Cloud Security

• IAM, IAM Identity Center, AWS Organizations, and SCPs.
• KMS and Secrets Manager.
• GuardDuty, Security Hub, AWS Config, and CloudTrail.
• AWS WAF, Shield, and CIS Benchmarks.
• Knowledge of ISO 27001 and PCI DSS compliance.

5. Scripting & Automation

• Python, Bash, or PowerShell.

Experience & Qualifications

• Minimum 5+ years of experience in Cloud, Infrastructure, Network, or Security Engineering.
• Minimum 3+ years of hands-on AWS experience in production environments.
• Strong experience designing and managing Kubernetes-based containerised workloads.
• Proven experience implementing and maintaining CI/CD pipelines.
• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.

Mandatory Certification

• AWS Certified Solutions Architect – Associate or higher.