Cloud Engineer

American Chemical Society•Washington, DC

6d•$130,000 - $150,000•Hybrid

About The Position

We are seeking an experienced Cloud Engineer to support the implementation, automation, governance, and ongoing operations of our AWS cloud environment. This role will focus on AWS multi-account management, cloud security, infrastructure automation, identity and access management, networking, monitoring, and cost optimization. The candidate must have strong hands-on experience with AWS services such as AWS Control Tower, AWS Organizations, IAM, IAM Identity Center, Service Control Policies, VPC, EC2, S3, RDS, Lambda, CloudWatch, CloudTrail, AWS Config, and GuardDuty. The role also requires infrastructure-as-code experience using Terraform and AWS CloudFormation. The Cloud Engineer will work closely with Application, DevOps, SRE, Network, Security, and other support teams as required.

Requirements

Bachelor’s degree or Master’s degree in Computer Science, Information Technology, Engineering, or equivalent work experience.
8+ years of hands-on experience working with AWS cloud services.
Strong knowledge of core AWS services including EC2, VPC, IAM, S3, RDS, Lambda, CloudWatch, CloudTrail, AWS Config, and GuardDuty.
Experience with AWS Control Tower, AWS Organizations, IAM Identity Center, Service Control Policies, and multi-account AWS governance.
Experience with infrastructure-as-code tools such as Terraform and AWS CloudFormation.
Strong understanding of AWS networking concepts including VPCs, subnets, routing, DNS, load balancing, security groups, NACLs, NAT gateways, internet gateways, and traffic flow.
Experience with Linux administration and Linux fundamentals.
Working knowledge of CI/CD tools such as GitHub Actions, Jenkins, AWS CodePipeline, or similar platforms.
Experience using Git for version control, branching, pull requests, and code reviews.
Experience with scripting and automation using Python, Bash, AWS CLI, or Lambda.
Ability to troubleshoot cloud infrastructure, networking, application access, and permission-related issues.
Strong understanding of cloud security best practices, IAM policies, encryption, logging, monitoring, and compliance requirements.
Strong communication skills and ability to work with cross-functional technical teams, including Application, DevOps, SRE, Network, Security, and Infrastructure teams.

Nice To Haves

AWS certification such as AWS Certified Solutions Architect, AWS SysOps Administrator, or AWS DevOps Engineer.
Experience with AWS cost management tools such as AWS Cost Explorer, AWS Budgets, Compute Optimizer, or third-party FinOps tools.
Experience with centralized logging, cloud governance, tagging standards, account controls, access reviews, and operational reporting.
Experience supporting enterprise AWS environments with multiple accounts and environments.

Responsibilities

Manage and support AWS cloud infrastructure across development, staging, and production environments.
Support AWS multi-account governance using AWS Control Tower, AWS Organizations, organizational units, account structure, and guardrails.
Manage IAM roles, IAM policies, permission sets, permission boundaries, security groups, network access, and least-privilege access controls.
Administer AWS IAM Identity Center, including permission sets, account assignments, and group-based access.
Implement and maintain Service Control Policies to enforce cloud security, compliance, and operational standards.
Deploy and manage AWS infrastructure using Terraform, AWS CloudFormation, AWS CLI, and automation scripts.
Support AWS networking components including VPCs, subnets, route tables, security groups, NACLs, internet gateways, NAT gateways, load balancers, VPN, DNS, and traffic flow configurations.
Troubleshoot cloud infrastructure issues related to networking, compute, storage, access, permissions, deployments, and application connectivity.
Monitor cloud resources using CloudWatch, CloudTrail, AWS Config, GuardDuty, and other monitoring and security tools.
Support cloud security best practices including IAM governance, encryption, logging, secrets management, monitoring, and compliance controls.
Manage secrets and secure access using tools such as AWS Secrets Manager, AWS Systems Manager Parameter Store, and Delinea.
Support cost optimization initiatives including resource right-sizing, reserved instances, savings plans, automated shutdown schedules, budget controls, and cloud usage reporting.
Create automation scripts using Python, Bash, AWS CLI, or Lambda to reduce manual operational tasks.
Use Git and CI/CD tools to support infrastructure change management, code reviews, branching, and deployment workflows.
Maintain documentation for cloud architecture, operational standards, procedures, runbooks, and security controls.
Participate in operational support, cloud governance, automation initiatives, infrastructure improvements, and production incident resolution as needed.