Senior AWS Platform Engineer (LZA & Networking)

Experis - ManpowerGroup; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading technology staffing company is seeking a Senior AWS Platform Engineer specializing in networking to join their team on a contractual basis. This role requires expertise in AWS Landing Zone and extensive knowledge of cloud security and infrastructure. Candidates should have a solid grasp of cloud services and DevOps practices. The position offers remote working and requires active SC clearance. This is a great opportunity to work innovatively in designing secure cloud environments.

Qualifications

• Deep expertise in AWS Landing Zone Accelerator and network architecture.
• Proficient in automating deployment pipelines using Terraform.
• Strong understanding of AWS security best practices.

Responsibilities

• Deploy and configure AWS Landing Zone Accelerator for governance.
• Design and manage AWS networking solutions like VPCs and Transit Gateways.
• Implement monitoring and compliance with security standards.

Skills

Platform Engineering

AWS Landing Zone Accelerator

AWS networking services

Infrastructure as Code (IaC)

Container orchestration

Public Cloud Expertise

DevOps Practices

Education

Certification in cloud technologies (AWS, Azure, GCP)

Tools

Terraform

Ansible

Python

Ruby

Job description

Overview

Senior AWS Platform Engineer (LZA Networking Specialism)

Location: London, UK Remote working

£550 per day Inside IR35

Active Home Office SC Clearance required

Contract until End of March, with an additional 6 months

About the role

We are seeking a highly skilled Platform Engineer with deep expertise in AWS Landing Zone Accelerator (LZA) and network architecture. This role will focus on designing, implementing, and maintaining secure, scalable, and compliant cloud environments that form the foundation of our enterprise platform strategy. Leveraging your expertise in cloud technologies and best practices, you will work closely with tenants to architect, implement, and optimise solutions. You will collaborate with cross-functional teams to drive innovation and deliver exceptional value to our customers.

Important

• You must have SC
• Join HO on site office days (once in 2 months, either Ruskin Square (Croydon), 2 Marsham Street (Whitehall) or Soapworks (Manchester)

Requirements

About you

You\'ll be passionate about new technology and automation, and experienced in being part of an Engineering Team and Agile and DevOps best practices. You\'ll also be able to talk to us about your:

• Knowledge of continuous integration and deployment practices
• Ability to collaborate with people of all levels of technical ability
• Understanding of industry best practices
• Team player
• Pro active

Responsibilities

AWS Landing Zone Design & Implementation: -

• Deploy and configure AWS Landing Zone Accelerator to establish multi-account governance and security baselines.
• Implement organizational policies, guardrails, and compliance controls using AWS Control Tower and LZA.
• Automate account provisioning and configuration for consistent cloud adoption.

Networking Architecture: -

• Design and manage AWS networking solutions, including VPCs, Transit Gateways, PrivateLink, and hybrid connectivity.
• Implement secure and resilient network topologies for multi-region and multi-account environments.
• Optimize network performance and cost while ensuring compliance with security standards.

Automation & Infrastructure as Code: -

• Develop and maintain Infrastructure as Code (IaC) using Terraform or AWS CDK for Landing Zone and networking components.
• Automate deployment pipelines for platform services and configurations.
• Integrate networking and governance controls into CI/CD workflows.

Security & Compliance: -

• Apply AWS security best practices for identity, access management, and network segmentation.
• Ensure compliance with organizational and regulatory requirements (e.g., ISO, NIST, CIS benchmarks).
• Implement monitoring and alerting for network and governance health.

Collaboration & Enablement: -

• Partner with cloud engineering and security teams to embed Landing Zone and networking best practices.
• Provide documentation and training for platform usage and governance.
• Act as a subject matter expert for AWS networking and Landing Zone architecture.

Skills

• Platform Engineering: Proficiency in designing and implementing scalable, resilient, and secure cloud platforms.
• Cloud Organisation Management: Strong hands-on experience with AWS Landing Zone Accelerator and AWS Control Tower.
• Networking: Expertise in AWS networking services (VPC, Transit Gateway, Direct Connect, PrivateLink).
• Automation: Experience with infrastructure-as-code (IaC) practices, automation tools (e.g., Terraform, Ansible) and scripting languages (e.g. Python, Ruby).
• Container Orchestration: Knowledge of container orchestration platforms (e.g., Kubernetes) and their managed counterparts (e.g., EKS, AKS, GKE).
• Public Cloud Expertise: Understanding of cloud services, architecture, and best practices in one or more major public cloud providers (AWS, Azure, GCP).
• DevOps Practices: Strong experience with GitHub CI/CD pipelines, version control systems, and containerisation technologies (e.g., Docker).

Experience

• Project Leadership: Demonstrated experience delivering cloud migration, optimisation, or transformation projects.
• Client-Facing Experience: Proven track record of engaging with clients, understanding their requirements, and delivering solutions that exceed expectations.
• Team Collaboration: Ability to work effectively in cross-functional teams, communicate technical concepts to non-technical stakeholders, and drive consensus.
• Continuous Learning: Commitment to staying abreast of industry trends, participating in professional development activities, and obtaining relevant certifications.

Qualifications

Certification in relevant cloud technologies (AWS, Azure, GCP) at an associate level is highly desirable, e.g.:

• AWS Certified: Solutions Architect Associate
• AWS Certified: Solutions Architect Professional

Certification in Kubernetes administration is desirable:

• Certified Kubernetes Administrator (CKA)
• Certified Kubernetes Security Specialist (CKSS)