Cloud Infrastructure Engineer

Role Overview

We are seeking an experienced Cloud Infrastructure Engineer to design, implement, and secure AWS cloud environments supporting large-scale data platforms. The role will focus on infrastructure provisioning, networking, security, automation, and governance within highly regulated environments.

Note: Resources for this role are required to be onshore due to the classified nature of the environment.

Key Responsibilities

• Design and provision AWS environments including VPCs, subnets, security groups, network ACLs, IAM roles, and encryption services.
• Implement and manage AWS Lake Formation infrastructure, data catalogs, permissions, and cross-account resource sharing.
• Build and maintain CI/CD pipelines integrated with SHIP-HATS and enterprise deployment frameworks.
• Configure secure cross-agency connectivity using VPC Peering, Transit Gateway, and AWS PrivateLink.
• Develop monitoring and governance capabilities using Amazon CloudWatch, AWS CloudTrail, and AWS Config.
• Implement role-based access control (RBAC), tag-based access control (TBAC), and fine-grained permissions frameworks.
• Provision and maintain development, testing, and pre-production environments aligned with production architecture.
• Implement security best practices including encryption at rest, encryption in transit, VPC endpoints, and secure access controls.
• Collaborate with technical leadership on reusable infrastructure patterns and deployment standards.
• Produce architecture documentation, infrastructure diagrams, operational runbooks, and code repositories.
• Participate in Agile ceremonies, sprint demos, and infrastructure design reviews.

Required Skills & Experience

• 5 years of experience in Cloud Infrastructure Engineering or Cloud Platform Engineering.
• Strong expertise in AWS networking including VPCs, Transit Gateway, PrivateLink, Security Groups, and IAM.
• Hands-on experience with Terraform, AWS CDK, or CloudFormation.
• Experience building and managing CI/CD pipelines using GitLab CI, AWS CodePipeline, or similar tools.
• Strong understanding of Linux administration and cloud security best practices.
• Experience implementing encryption, governance, and compliance controls in enterprise environments.
• Knowledge of Infrastructure as Code, automation, and cloud operational excellence principles.

Good to Have

• Hands-on experience with SHIP-HATS (highly preferred).
• Experience with AWS Lake Formation cross-account architecture.
• Experience with Transit Gateway and large-scale multi-account AWS environments.
• Prior experience supporting Government Agencies, IMDA, or Public Sector cloud programs.

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline.