AWS Cloud Engineer

Ironbook AI; Kuala Lumpur; Presencial; MYR 120.000 - 180.000; Jornada completa

Descripción de la vacante

Ironbook AI in Kuala Lumpur is seeking an AWS Cloud Engineer to design, build, secure and operate cloud infrastructure, including containerised workloads on AWS. You will own the full deployment path from code commit to production, ensuring security and compliance at every stage.

Responsibilities include designing scalable AWS architectures, managing EKS clusters, IaC with Terraform or CDK, and implementing CI/CD pipelines with security checks.

Formación

• 5+ years in cloud, infrastructure, network or security engineering.
• 3+ years hands-on with AWS in production environments.
• Experience designing and operating containerised workloads on Kubernetes.
• Proven delivery of CI/CD pipelines in a team environment.
• Degree in Computer Science, Engineering or equivalent practical experience.

Responsabilidades

• Design and deploy scalable, highly available AWS architectures across multiple accounts and Availability Zones.
• Build and operate EKS clusters, ECR repositories, and container workloads using Helm and GitOps practices.
• Provision and manage infrastructure as code with Terraform or AWS CDK.
• Migrate workloads to AWS, including batch processing and relational databases.
• Monitor, tune and optimise cost and performance with CloudWatch and cost management tooling.

Conocimientos

DevSecOps

Security

Scripting

Educación

Bachelor's degree in CS/Engineering

Herramientas

Terraform

AWS CDK

Kubernetes

Descripción del empleo

Role summary: The AWS Cloud Engineer designs, builds, secures and operates cloud infrastructure, network connectivity, CI/CD pipelines and security controls for containerised applications running on AWS, including EKS-hosted workloads. The role owns the full path from code commit to production, and keeps the environment compliant and secure at every stage.

Key Responsibilities

• Design and deploy scalable, highly available AWS architectures across multiple accounts and Availability Zones.
• Build and operate EKS clusters, ECR repositories, and container workloads using Helm and GitOps practices.
• Provision and manage infrastructure as code with Terraform or AWS CDK.
• Migrate workloads to AWS, including batch processing (AWS Batch, Lambda) and relational databases (Aurora, RDS).
• Monitor, tune and optimise cost and performance with CloudWatch and cost management tooling.
• Design VPC layouts, subnets, route tables and multi-account connectivity using Transit Gateway and PrivateLink.
• Establish and maintain hybrid connectivity through Site-to-Site VPN and Direct Connect.
• Configure DNS, load balancing and content delivery using Route 53, ALB/NLB and CloudFront.
• Enforce network security through security groups, NACLs and AWS Network Firewall.
• Troubleshoot routing, latency and connectivity issues across BGP, TCP/IP and IPSec paths.

DevSecOps and CI/CD

• Build and maintain CI/CD pipelines that build, test, scan and deploy workloads to non-production and production environments.
• Integrate security checks into pipelines, including dependency scanning, container image scanning and infrastructure policy checks.
• Manage secrets and credentials securely using Secrets Manager and KMS, with IAM roles for service accounts.
• Automate deployment, rollback and environment provisioning.
• Define and enforce identity and access controls using IAM, IAM Identity Center, AWS Organizations and service control policies.
• Monitor and respond to threats using GuardDuty, Security Hub, AWS Config and CloudTrail.
• Protect data with encryption at rest and in transit, using KMS and related controls.
• Secure public-facing services with AWS WAF and Shield.
• Maintain alignment with CIS benchmarks and relevant compliance frameworks (for example ISO 27001 or PCI DSS).
• Support incident response, security investigations and audit evidence collection.

Documentation and Collaboration

• Produce architecture diagrams, runbooks, and security and network standards.
• Work with application, database and security teams to translate requirements into secure, supportable designs.
• Mentor junior engineers and contribute to team standards and knowledge sharing.

Required Skills

• DevSecOps: GitHub Actions, GitLab CI or AWS CodePipeline; Terraform or CDK; policy-as-code
• Security: IAM, AWS Organizations and SCPs, KMS, Secrets Manager, GuardDuty, Security Hub, WAF, CIS benchmarks
• Scripting: Python, Bash or PowerShell

Experience and Qualifications

• 5+ years in cloud, infrastructure, network or security engineering
• 3+ years hands-on with AWS in production environments
• Experience designing and operating containerised workloads on Kubernetes
• Proven delivery of CI/CD pipelines in a team environment
• Degree in Computer Science, Engineering or equivalent practical experience

Certifications

• Required: AWS Solutions Architect – Associate (or higher)

Personal Attributes

• Strong troubleshooting and analytical skills
• Clear written and verbal communication with technical and non-technical audiences
• Ownership mindset, with a focus on security and reliability
• Comfortable working across time zones with partner teams