AWS Cloud Engineer

Matlen Silver; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Matlen Silver in Plano, TX is seeking an AWS Architect with hands-on Terraform expertise to design end-to-end AWS solutions across multiple accounts and regions.

You will build reusable IaC modules, implement policy-as-code, and integrate Bitbucket pipelines for Terraform plans and applies, ensuring secure, scalable cloud deployments with cost optimization.

Qualifications

• Hands-on AWS architecture experience across multi-account, multi-region environments.
• Expertise with infrastructure as code using Terraform and Terraform Enterprise.
• Strong CI/CD experience, especially with Bitbucket pipelines and Terraform workflows.
• Deep knowledge of IAM, networking (VPCs, VPNs, Direct Connect) and security controls.

Responsibilities

• Design end-to-end AWS solutions via IaC using Terraform in multi-account environments.
• Build reusable IaC modules and manage state, backends and promotion patterns.
• Implement policy-as-code and governance using Terraform Enterprise features.
• Integrate Bitbucket pipelines for plan/apply automation with quality gates and approvals.
• Optimize cost, performance, and security across AWS architectures.

Skills

AWS architecture

CI/CD

Security & compliance

Networking

IAM

Tools

Terraform

Terraform Enterprise

Bitbucket

Ansible

Job description

Locations: Plano TX, Chandler AZ and Charlotte NC

AWS Architect with Hands-on experience in building Terraform modules and CI/CD experience using Terrafrom enterprise.

AWS Architecture with strong knowledge on Database products/ IAM/ Network, Hands-on experience with Terraform, Strong CI/CD experience with Bitbucket/Terraform Enterprise. Ansible Playbook experience is plus

Candidate is responsible to design End to End solution for AWS Database products via Infrastructure as code through Terraform

Proven Terraform hands-on experience (7 years) building reusable IaC modules, managing state, workspaces, remote backends, and environment promotion patterns.

Terraform Enterprise (TFE) experience: workspace design, policy-as-code (Sentinel/OPA where applicable), variable management, VCS-driven workflows, and run governance.

Strong CI/CD implementation experience integrating Bitbucket pipelines (or Bitbucket + runners) to automate Terraform plans/applies with quality gates and approvals.

Strong AWS architecture expertise designing secure, scalable, highly available solutions across multi-account and multi-region environments.

Deep knowledge of AWS database services (e.g., RDS/Aurora, DynamoDB, DocumentDB, ElastiCache, OpenSearch) including HA/DR patterns, performance, and cost optimization.

Hands-on IAM expertise: designing least-privilege access, IAM roles/policies, permission boundaries, SCPs, cross-account access, and federation/SSO integration.

Strong AWS networking skills: VPC design, subnets, route tables, NAT/IGW, Transit Gateway, VPC endpoints/PrivateLink, security groups/NACLs, DNS (Route 53), and hybrid connectivity (VPN/Direct Connect).

Security and compliance mindset: encryption (KMS), secrets management (Secrets Manager/Parameter Store), auditability (CloudTrail), logging/monitoring (CloudWatch), and alignment to enterprise controls.

Automation tooling experience (Plus): Ansible playbooks for configuration automation, orchestration, and post-provisioning tasks in hybrid/cloud environments.