Cloud Engineer – AWS Foundation Platform

Stellantis • Auburn Hills, MI

2d

About The Position

Stellantis is seeking a Cloud Engineer to support the design, implementation, and continuous improvement of its AWS Foundation Product, an AWS Landing Zone governing more than 1,500 AWS accounts across business functions and geographies. The role collaborates with SecOps, FinOps, platform consumers, and global infrastructure teams to build reusable platform components, improve DevOps maturity, and operate the AWS organizational layer as a product. AI tools are an integral part of the team’s daily engineering practice.

The engineer automates the AWS account lifecycle, builds a self-service cloud platform and Internal Developer Portal, owns Infrastructure as Code delivery pipelines, and operates governance and observability capabilities at scale. The role also applies AI tools to engineering work while retaining ownership of generated outputs, and turns incidents into systemic improvements through post-mortems and maintained, versioned runbooks and playbooks.

Requirements

• Bachelor’s degree in computer science, Information Technology, or a related field.
• At least 5 years of experience designing, deploying, and managing AWS cloud environments at enterprise scale in multi-account contexts.
• Expertise in AWS multi-account services, including AWS Control Tower, Organizations, Service Control Policies, and Landing Zone design patterns.
• Expert-level Terraform and/or AWS CDK for Infrastructure as Code, and experience with GitOps delivery pipelines, drift detection, and policy gates.
• Proficiency in Python and/or TypeScript for platform tooling, internal CLIs, automation services, and event-driven workflows.
• Daily use of AI coding assistants, with the ability to review, validate, and take ownership of AI-generated code at production quality.
• Solid understanding of DevOps and SRE practices, including DORA metrics, SLOs, error budgets, incident management, policy-as-code, and blameless post-mortems.
• Strong knowledge of AWS networking, including Transit Gateway, VPC design, Route 53, Direct Connect, and PrivateLink.
• Experience with AWS security services, including Security Hub, GuardDuty, Config Rules, IAM design, and automated compliance remediation.

Nice To Haves

• AWS Certifications preferred: DevOps Engineer Professional, Solutions Architect Professional, or Security Specialty.
• Familiarity with AIOps and AI/ML platform services such as Amazon Bedrock, SageMaker, Amazon Q Business, and DevOps Guru is a strong plus.

Responsibilities

• Design and implement end-to-end automation for AWS account provisioning, configuration, baselining, and decommissioning using Lambda, Step Functions, and EventBridge.
• Build and maintain a self-service cloud platform, including an account vending machine, network factory, identity federation, and an AI-capable Internal Developer Portal.
• Own Infrastructure as Code delivery pipelines across more than 1,500 accounts, applying Terraform, GitOps, policy-as-code, drift detection, and automated testing.
• Define and operate SLOs, Error Budgets, and an observability stack with AI-assisted anomaly detection across provisioning, cost, network, and security signals.
• Manage AWS Control Tower, Organizations, and Service Control Policies to enforce governance, least-privilege IAM, and compliance guardrails, including automated self-healing when drift is detected.
• Use AI tools in daily engineering for IaC authoring, automation scripting, test generation, incident analysis, and runbook maintenance, while maintaining full engineering ownership of generated outputs.
• Lead post-mortems and translate incidents into systemic engineering improvements.
• Maintain runbooks and playbooks as versioned, executable artifacts.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior