AWS Cloud Engineer — Remote Governance & Automation

ACS; Washington (District of Columbia); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Retirement benefits

Flexible work schedule

Job summary

ACS is seeking an experienced Cloud Engineer to lead AWS cloud governance, automation, and security across development, staging, and production environments. You will manage multi-account structures, IAM governance, and infrastructure automation using Terraform and CloudFormation.

The role requires strong hands‑on AWS experience, security mindset, and collaboration with cross‑functional teams including DevOps, SRE, and Security.

Qualifications

• Bachelor’s or higher in CS/IT/Engineering or equivalent experience.
• 8+ years of hands-on AWS experience.
• Strong knowledge of core AWS services (EC2, VPC, IAM, S3, RDS, Lambda, CloudWatch, CloudTrail, Config, GuardDuty).
• Experience with AWS Control Tower, AWS Organizations, IAM Identity Center, and multi-account governance.
• Infrastructure-as-code with Terraform and CloudFormation.
• Strong networking concepts including VPCs, subnets, DNS, load balancers, NATs, and security controls.
• Experience with Linux administration and Linux fundamentals.
• CI/CD tools such as GitHub Actions, Jenkins, AWS CodePipeline, or similar.
• Experience using Git for version control and code reviews.
• Scripting/automation with Python, Bash, AWS CLI, or Lambda.

Responsibilities

• Manage and support AWS infrastructure across development, staging, and production.
• Support multi-account governance using Control Tower, Organizations, OUs, and guardrails.
• Manage IAM roles, policies, permission sets, and least-privilege access controls.
• Administer IAM Identity Center including permission sets and group-based access.
• Implement Service Control Policies to enforce security and compliance.
• Deploy and manage infrastructure with Terraform, CloudFormation, and AWS CLI.
• Support networking components (VPCs, subnets, route tables, SGs, NAT, VPN, DNS, load balancers).
• Troubleshoot cloud issues in networking, compute, storage, and access.
• Monitor resources with CloudWatch, CloudTrail, Config, GuardDuty, and security tools.
• Maintain cloud security best practices, encryption, logging, and compliance.
• Manage secrets with Secrets Manager, Parameter Store, and Delinea.
• Cost optimization: rightsizing, reservations, budgets, and reporting.
• Create automation scripts with Python, Bash, CLI, or Lambda.
• Use Git and CI/CD for change management and deployments.
• Maintain documentation of architecture, standards, and runbooks.
• Participate in governance, automation, and incident resolution.

Skills

AWS

Cloud Architecture

Security Best Practices

CI/CD

Networking

Linux

Scripting

Education

Bachelor’s degree in CS/IT/Engineering

Tools

Terraform

AWS CloudFormation

GitHub Actions

AWS CLI

Job description

ACS is seeking an experienced Cloud Engineer to lead AWS cloud governance, automation, and security across development, staging, and production environments. You will manage multi-account structures, IAM governance, and infrastructure automation using Terraform and CloudFormation.

The role requires strong hands‑on AWS experience, security mindset, and collaboration with cross‑functional teams including DevOps, SRE, and Security.