Job description

Cloud Engineer – AWS & Automation Remote 6 months contract Job Requirements Document Position Overview Field Details Title Cloud Engineer – AWS Level Mid-Level Experience 3–5 years Cloud Engineering, 2+ years AWS Education Bachelor's in CS/IT or related field Certifications AWS Solutions Architect Associate (preferred) Technical Requirements AWS Networking General understanding of VPC architecture, subnets, route tables, and internet/NAT gateways Familiarity with Transit Gateway connectivity and multi-account networking patterns Understanding of NACLs and Security Groups and how they interact at different layers Experience with DNS resolution (Route 53) in multi-account environments IAM & Identity Management IAM policy authoring (JSON), permission boundaries, and cross-account role assumption Understanding of how IAM policies, SCPs, and permission boundaries interact and evaluate Experience with federated access patterns and temporary credentials (STS) SSO Technologies Prior experience with SSO technologies (SAML, OIDC) Familiarity with AWS IAM Identity Center configuration and assignment Understanding of external IdP integration patterns Service Control Policies (SCPs) Author and manage SCPs across AWS Organizations (deny-list/allow-list strategies) Implement region restrictions, service restrictions, root lockdown, and encryption enforcement Understand SCP inheritance, limitations, and testing without production disruption Account Factory for Terraform (AFT)

Requirements

Must-haves

Cloud Engineer – AWS & Automation
6 months contract
Job Requirements Document
Position Overview
Cloud Engineer – AWS
3–5 years Cloud Engineering, 2+ years AWS
Bachelor's in CS/IT or related field
Certifications
Technical Requirements
AWS Networking
General understanding of VPC architecture, subnets, route tables, and internet/NAT gateways
Familiarity with Transit Gateway connectivity and multi-account networking patterns
Understanding of NACLs and Security Groups and how they interact at different layers
Experience with DNS resolution (Route 53) in multi-account environments
IAM & Identity Management
IAM policy authoring (JSON), permission boundaries, and cross-account role assumption
Understanding of how IAM policies, SCPs, and permission boundaries interact and evaluate
Experience with federated access patterns and temporary credentials (STS)
SSO Technologies
Prior experience with SSO technologies (SAML, OIDC)
Familiarity with AWS IAM Identity Center configuration and assignment
Understanding of external IdP integration patterns
Service Control Policies (SCPs)

Nice-to-haves

AWS Solutions Architect Associate (preferred)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aws

Platform: jobdiva
Effort: medium