AWS Platform Engineer

Clark Construction Group, LLC•McLean, VA

8d•$125,000 - $180,000•Onsite

About The Position

The AWS Platform Engineer builds and safeguards the company’s AWS cloud ecosystem and manages the end-to-end lifecycle of AWS tenant accounts. The role focuses on maintaining secure, cost-optimized, and observable environments; bridging infrastructure and development through Infrastructure as Code (IaC); and managing advanced AI services such as AWS Bedrock. This is an on-site position requiring participation in a 24/7 on-call rotation and attendance at scheduled maintenance windows every other month on the third Saturday. The engineer provisions and governs tenant accounts and AWS services, enforces security and compliance controls, manages Bedrock access and performance, and supports automation and DevOps workflows. The role also covers observability, cost management, IP networking, security operations, end-user technical support, and mentorship of junior colleagues. The work is primarily in a professional office and may include occasional travel to active construction sites. The role involves prolonged desk work and computer use, communication and visual-detail demands, movement around the office and job sites, and lifting objects up to 10 pounds regularly and up to 25 pounds occasionally. Construction-site visits may involve outdoor weather, louder noise, and moving equipment. The position operates in a demanding, high-performance environment with flexibility for extended hours and responsiveness to time-sensitive matters and emergencies. A pre-employment fitness-for-duty drug screening and random quarterly screenings are required.

Requirements

Proven experience with AWS Organizations, Control Tower, and core AWS compute, storage, and database services.
Strong background automating infrastructure with Terraform or AWS CDK.
Experience setting up dashboards, alerts, and log aggregation.
Ability to manage PagerDuty rotations and lead root-cause analysis.
Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
Minimum of 5 years of systems administration experience.
Proficiency in AWS.
Deep understanding of TCP/IP networking, network protocols, and ports.
Strong skills in computer and systems security best practices.
Experience with scripting languages such as PowerShell, Bash, or Python.
Excellent troubleshooting and problem-solving skills.
Strong communication and teamwork skills.
Ability to work on-site, participate in an on-call rotation, and attend scheduled maintenance windows.
Ability to work extended hours and respond to communications when business needs require it.
Comfort with prolonged desk work, focused computer work, effective communication, and visual acuity for reviewing complex documents.
Ability to move around an office and construction sites, travel occasionally to various locations using different modes of transportation, and lift up to 10 pounds regularly and 25 pounds occasionally.
Ability to follow applicable safety policies and procedures at office and construction-site locations.
Ability to complete a pre-employment fitness-for-duty drug screening and comply with random quarterly fitness-for-duty drug testing.

Nice To Haves

Familiarity with LLM infrastructure and AI services, particularly AWS Bedrock.
Relevant certifications, such as AWS Certified SysOps Administrator – Associate, Azure Administrator Associate, CompTIA Security+, or CISSP.
Experience with automation tools such as Ansible or Chef.
Experience with security frameworks such as NIST or ISO 27001.
Experience with AWS FedRAMP Moderate and High offerings.
AWS Certified Cloud Practitioner.

Responsibilities

Provision and configure AWS tenant accounts in accordance with the AWS Well-Architected Framework.
Enforce security policies, including IAM, SCPs, and GuardDuty, across environments.
Enable, disable, and govern tenant use of AWS services, including S3, Lambda, and PostgreSQL on RDS.
Manage and monitor AWS Bedrock deployments, including model access, throughput limits, and performance metrics.
Implement guardrails for generative AI use in tenant accounts.
Establish and maintain Infrastructure as Code procedures using Terraform, CloudFormation, or Pulumi to support streamlined deployments and DevOps workflows.
Configure and maintain PagerDuty integrations for infrastructure alerts and system health issues.
Set up monitoring and logging using CloudWatch, X-Ray, or third-party tools.
Implement cost-allocation tags, budgets, and reporting, and identify cost-saving opportunities for tenants.
Manage and troubleshoot TCP/IP networking, including subnetting, routing, DNS, DHCP, HTTP/HTTPS, and SSH.
Analyze network traffic, diagnose network issues, and manage hybrid network connections.
Implement and maintain computer and systems security best practices, vulnerability management, and patch management.
Use security monitoring tools such as SIEM and IDS/IPS, respond to security incidents, and perform malware analysis.
Implement security auditing, compliance, and least-privilege access.
Provide prompt, professional technical support to end users and communicate technical information clearly to non-technical users.
Resolve user issues efficiently while maintaining a positive and helpful attitude.
Mentor junior team members, provide technical and career-development guidance, and share expertise.
Attend scheduled maintenance windows every other month on the third Saturday.
Participate in an on-call rotation to provide 24/7 support for critical systems.
Respond to work communications as needed during extended hours, critical project phases, deadlines, time-sensitive matters, and emergencies.
Follow Clark Construction safety policies, procedures, and applicable laws at all work locations.