Job description

About The Role: Nearly every engineering team at Torc builds and runs workloads in AWS, and we are the team that makes that possible at scale. We own and operate a large, global AWS Organization and Control Tower, and we are accountable for the foundational infrastructure, security posture, and developer tooling that the rest of engineering depends on. What You'll Do: Define and maintain an account vending machine with appropriate organizational control policies. Design and operate shared networks, including Direct Connect, Site-to-Site VPN, and cloud-native network segmentation. Own cloud security posture: SIEM integrations, identity and access management, and compliance tooling. Design, deploy, and operate shared infrastructure including EKS and ECS clusters, and hosted application platforms. Maintain and improve CI/CD infrastructure and shared build tooling used across the engineering organization. Manage shared package and artifact distribution (JFrog Artifactory, AWS CodeArtifact). Drive cloud cost visibility, attribution, and efficiency across the organization. Collaborate with teams specializing in perception, planning, control, mapping, and vehicle testing to architect solutions that support their development workflows in AWS. Contribute to technical decisions, design reviews, and the team's documentation and operational standards. Here is a list of some of the technologies we use to make all the above happen: AWS (Organizations, Control Tower, Direct Connect, Site-to-Site VPN, WAF, FMS, Lambda, EventBridge, MACIE, SecurityHub, EKS, ECS, IAM, S3, EC2). Terraform and Account Factory for Terraform (AFT). Python. GitHub Actions, Jenkins, JFrog Artifactory, AWS CodeArtifact. On-Call Tooling (Datadog, AWS CloudWatch). What You'll Need To Succeed: Bachelor’s degree in Computer Science or a related field with 6+ years of experience OR a Master's degree with 3+ years of experience. Deep, hands-on experience with AWS, particularly in multi-account Organizations, IAM, networking, EKS/ECS, and security services. Strong infrastructure as code discipline using Terraform, including module design and managing state at scale. Demonstrated experience with cloud security fundamentals: identity and access management, least-privilege design, compliance tooling, and security posture management. Familiarity with CI/CD systems and the infrastructure behind build, test, and artifact workflows. Bonus Points! Strong organizational, time management, and communication skills working with a team orientation and collaborative style. Experience with AWS Control Tower, Account Factory for Terraform (AFT), or similar account vending patterns. Experience operating infrastructure for ML or robotics workloads. How We Work: We work in a distributed team to ensure everyone is on the same playing field in terms of collaboration and information, regardless of where they work. We collaborate frequently in many different forms, including daily stand-ups, planning meetings, and many ad hoc discussions/brainstorming/troubleshooting/pairing sessions over Zoom or Slack. Our team is operationally responsible for the services we own, so we do have an on-call rotation in place where each member will take a turn serving as the front line for incidents for our services. Rotations last a week each, during business hours. We value maintaining a healthy work/life balance and prefer sustainable development over heroic efforts. Hiring Range for Job Opening US Pay Range $160,800 — $193,000 USD

Requirements

Must-haves

Define and maintain an account vending machine with appropriate organizational control policies.
Design and operate shared networks, including Direct Connect, Site-to-Site VPN, and cloud-native network segmentation.
Own cloud security posture: SIEM integrations, identity and access management, and compliance tooling.
Design, deploy, and operate shared infrastructure including EKS and ECS clusters, and hosted application platforms.
Maintain and improve CI/CD infrastructure and shared build tooling used across the engineering organization.
Manage shared package and artifact distribution (JFrog Artifactory, AWS CodeArtifact).
Drive cloud cost visibility, attribution, and efficiency across the organization.
Collaborate with teams specializing in perception, planning, control, mapping, and vehicle testing to architect solutions that support their development workflows in AWS.
Contribute to technical decisions, design reviews, and the team's documentation and operational standards.
Here is a list of some of the technologies we use to make all the above happen:
AWS (Organizations, Control Tower, Direct Connect, Site-to-Site VPN, WAF, FMS, Lambda, EventBridge, MACIE, SecurityHub, EKS, ECS, IAM, S3, EC2).
Terraform and Account Factory for Terraform (AFT).
GitHub Actions, Jenkins, JFrog Artifactory, AWS CodeArtifact.
On-Call Tooling (Datadog, AWS CloudWatch).
Bachelor’s degree in Computer Science or a related field with 6+ years of experience OR a Master's degree with 3+ years of experience.
Deep, hands-on experience with AWS, particularly in multi-account Organizations, IAM, networking, EKS/ECS, and security services.
Strong infrastructure as code discipline using Terraform, including module design and managing state at scale.
Demonstrated experience with cloud security fundamentals: identity and access management, least-privilege design, compliance tooling, and security posture management.
Familiarity with CI/CD systems and the infrastructure behind build, test, and artifact workflows.
Strong organizational, time management, and communication skills working with a team orientation and collaborative style.
Experience with AWS Control Tower, Account Factory for Terraform (AFT), or similar account vending patterns.
Experience operating infrastructure for ML or robotics workloads.

Nice-to-haves

Bonus Points!

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsrestci/cdpythonml

Platform: greenhouse
Effort: quick