AWS Cloud Engineer

Pyramid Consulting, Inc; Mexico; On-site; PHP 7,491,000 - 11,860,000; Full time

Job summary

Pyramid Consulting, Inc. is seeking an experienced AWS Cloud Engineer to own, secure, and modernize our AWS infrastructure across multiple tenant accounts.

You will be the technical authority for the AWS estate, designing, building, automating, and operating cloud environments with a focus on security and reliability. This hands-on role partners with Systems Engineering, InfoSec, and IT to implement an AWS Security Reference Architecture, harden controls, and support ISO 27001:2022 compliance.

Qualifications

• 5+ years hands-on experience designing, building, and operating production AWS environments.
• Current AWS Certified Security – Specialty certification (strongly preferred); Solutions Architect – Professional and/or SysOps Administrator certifications preferred.
• Proven track record owning AWS infrastructure at scale, ideally across a multi-account or multi-tenant organization.
• Hands‑on experience with AWS Organizations, Control Tower, and building or operating an SRA-aligned or well-architected landing zone.
• Strong scripting skills and experience with IAM, networking, and security services.

Responsibilities

• Own, secure, and modernize AWS infrastructure across multiple tenant accounts.
• Lead transition to an AWS Security Reference Architecture (SRA)-aligned, multi-account environment.
• Design, build, automate, and operate cloud infrastructure while ensuring security, resilience, and cost-effectiveness.

Skills

AWS design & ops

Security architecture

Terraform/CFN/CDK

CI/CD automation

Scripting (Python/Bash/PowerShell)

Networking & IAM

Documentation & stakeholder comms

Tools

AWS Organizations

Control Tower

Terraform

CloudFormation

Job description

• AWS Cloud Engineer to own, secure, and modernize our AWS infrastructure across numerous tenant accounts.
• You will lead the transition to an AWS Security Reference Architecture (SRA)-aligned, multi-account environment, harden our cloud security posture, and support enterprise security and compliance initiatives such as ISO 27001:2022.
• This is a hands-on, individual-contributor ownership role: you will be the technical authority for our AWS estate – designing, building, automating, and operating cloud infrastructure – while partnering with Systems Engineering, InfoSec, and IT to keep our environments secure, resilient, well-documented, and cost-effective.

Essential duties and responsibilities:

• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.
• The requirements listed below are representative of the knowledge, skill, and/or ability required.
• Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. Other duties may be assigned.

Qualifications:

• 5+ years of hands-on experience designing, building, and operating production AWS environments.
• Current AWS Certified Security – Specialty certification (strongly preferred); Solutions Architect – Professional and/or SysOps Administrator certifications preferred.
• Proven track record owning AWS infrastructure at scale, ideally across a multi-account or multi-tenant organization.
• Hands‑on experience with AWS Organizations, Control Tower, and building or operating an SRA-aligned or well-architected landing zone.
• Strong experience with AWS security services (IAM Identity Center, GuardDuty, Security Hub, Config, CloudTrail, KMS, WAF) and least-privilege design.
• Experience supporting compliance frameworks such as ISO 27001:2022, SOC 2, or similar, including implementing and evidencing controls.
• Proficiency with infrastructure as code (Terraform, CloudFormation, or CDK) and CI/CD automation.
• Strong scripting skills (e.g., Python, Bash, or PowerShell).
• Solid understanding of cloud networking, encryption, and identity and access management.
• Strong documentation and communication skills, with the ability to work effectively with both technical and non-technical stakeholders.

Critical Qualities:

• Strong sense of ownership — accountable for the security, reliability, and quality of the AWS estate end to end.
• Security-first mindset and sound judgment around risk, least privilege, and compliance.
• Ability to balance modernization and automation with operational stability.
• Clear thinking and composure during incidents and outages.
• Proactive approach to hardening, monitoring, and continuous improvement.
• Strong organizational skills and attention to detail.
• Effective collaboration across Systems Engineering, InfoSec, and IT.