Senior AWS Platform Engineer

Undisclosed; London, Manchester; Hybrid; GBP 120,000 - 140,000; Part time

Job summary

Undisclosed is seeking a Platform Engineer with deep expertise in AWS Landing Zone Accelerator and cloud networking to design, implement, and secure scalable enterprise environments. Hybrid working, with onsite visits every two months in London or Manchester.

You will automate infrastructure with IaC (Terraform/AWS CDK), enforce governance, and integrate networking into CI/CD pipelines while collaborating with cross-functional teams and maintaining strong security compliance.

Qualifications

• Proficiency in AWS Landing Zone Accelerator and AWS Control Tower.
• Experience with Terraform or AWS CDK for LZA and networking.
• Knowledge of CI/CD pipelines, especially GitHub.
• Security/compliance focus with ISO/NIST/CIS standards.

Responsibilities

• Design and deploy AWS Landing Zone and guardrails.
• Implement multi-account governance and secure baselines.
• Automate provisioning and network designs including VPCs and gateways.
• Integrate governance into CI/CD workflows.
• Provide documentation and training on platform usage.

Skills

Platform engineering

AWS Landing Zone

AWS Control Tower

Networking

IaC (Terraform)

CI/CD

Kubernetes

Cloud security

Scripting (Python)

Automation

Direct Connect

Education

AWS Solutions Architect Associate

AWS Solutions Architect Professional

Tools

AWS Landing Zone Accelerator

AWS Control Tower

Terraform

AWS CDK

Ansible

Docker

Kubernetes

Job description

Duration: contract to run until 31/03/2027

Location: Hybrid working. Onsite once every 2 months either in London/Manchester

Rate: up to £565.80 p/d Umbrellainside IR35

Clearance required: Active SC Clearance held with a government agency

We are seeking a highly skilled Platform Engineer with deep expertise in AWS Landing Zone Accelerator (LZA) and network architecture. This role will focus on designing, implementing, and maintaining secure, scalable, and compliant cloud environments that form the foundation of our enterprise platform strategy. Leveraging your expertise in cloud technologies and best practices, you will work closely with tenants to architect, implement, and optimise solutions. You will collaborate with cross-functional teams to drive innovation and deliver exceptional value to our customers.

About you

You’ll be passionate about new technology and automation and experienced in being part of an Engineering

Team and Agile and DevOps best practices. You’ll also be able to talk to us about your:

• Knowledge of continuous integration and deployment practices
• Ability to collaborate with people of all levels of technical ability
• Understanding of industry best practices
• Team player

Responsibilities

AWS Landing Zone Design & Implementation:

• Deploy and configure AWS Landing Zone Accelerator to establish multi-account governance and security baselines.
• Implement organizational policies, guardrails, and compliance controls using AWS Control Tower and LZA.
• Automate account provisioning and configuration for consistent cloud adoption.
• Design and manage AWS networking solutions, including VPCs, Transit Gateways, PrivateLink, and hybrid connectivity.
• Implement secure and resilient network topologies for multi-region and multi-account environments.
• Optimize network performance and cost while ensuring compliance with security standards.

Automation & Infrastructure as Code:

• Develop and maintain Infrastructure as Code (IaC) using Terraform or AWS CDK for Landing Zone and networking components.
• Automate deployment pipelines for platform services and configurations.
• Integrate networking and governance controls into CI/CD workflows.

Security & Compliance:

• Apply AWS security best practices for identity, access management, and network segmentation.
• Ensure compliance with organizational and regulatory requirements (e.g., ISO, NIST, CIS benchmarks).
• Implement monitoring and alerting for network and governance health.
• Partner with cloud engineering and security teams to embed Landing Zone and networking best practices.
• Provide documentation and training for platform usage and governance.
• Act as a subject matter expert for AWS networking and Landing Zone architecture.

Skills

• Platform Engineering: Proficiency in designing and implementing scalable, resilient, and secure cloud platforms.
• Cloud Organisation Management: Strong hands-on experience with AWS Landing Zone Accelerator and AWS Control Tower.
• Networking: Expertise in AWS networking services (VPC, Transit Gateway, Direct Connect, PrivateLink).
• Automation: Experience with infrastructure-as-code (IaC) practices, automation tools (e.g., Terraform, Ansible) and scripting languages (e.g. Python, Ruby).
• Container Orchestration: Knowledge of container orchestration platforms (e.g., Kubernetes) and their managed counterparts (e.g., EKS, AKS, GKE).
• Public Cloud Expertise: Understanding of cloud services, architecture, and best practices in one or more major public cloud providers (AWS, Azure, GCP).
• DevOps Practices: Strong experience with GitHub CI/CD pipelines, version control systems, and containerisation technologies (e.g., Docker).

Experience

• Project Leadership: Demonstrated experience delivering cloud migration, optimisation, or transformation projects.
• Client-Facing Experience: Proven track record of engaging with clients, understanding their requirements, and delivering solutions that exceed expectations.
• Team Collaboration: Ability to work effectively in cross-functional teams, communicate technical concepts to non-technical stakeholders, and drive consensus.
• Continuous Learning: Commitment to staying abreast of industry trends, participating in professional development activities, and obtaining relevant certifications.

Qualifications

Certification in relevant cloud technologies (AWS, Azure, GCP) at an associate level is highly desirable, e:

• AWS Certified: Solutions Architect Associate
• AWS Certified: Solutions Architect Professional

Certification in Kubernetes administration is desirable:

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!