AWS Cloud Platform Engineer

Appnovation; Dallas (TX); Presencial; USD 140 000 - 170 000; Tempo integral

Resumo da oferta

Appnovation seeks AWS Cloud Platform Engineers to build and own the platform foundation across AWS accounts, networking, IAM boundaries and IaC modules. Focus areas include Infrastructure & IaC and CI/CD & Runtime Deployment, with ~6+ years in cloud or DevOps engineering.

You will implement secure, scalable AWS architectures, automation, and deployment pipelines, collaborating closely with client teams and internal platforms teams. This role is client-enabled and demands strong communication.

Qualificações

• 6+ years of cloud, platform or DevOps engineering experience.
• Strong infrastructure-as-code skills with Terraform and/or AWS CDK/CloudFormation.
• Deep understanding of AWS IAM, including cross-account access and service control policies.
• Solid AWS networking knowledge: VPC design, routing, endpoints, PrivateLink, Transit Gateway.
• Hands-on experience building CI/CD pipelines (GitHub Actions, GitLab CI, CodePipeline/CodeBuild).
• Strong container skills: Docker, ECR, and deploying to ECS/EKS/Fargate/Lambda.

Responsabilidades

• Design and stand up multi-account AWS environments with guardrails and SCPs.
• Build secure VPC designs and private connectivity for agent workloads.
• Define IAM roles and permission boundaries with least-privilege access.
• Create reusable IaC modules using Terraform and/or CDK/CloudFormation.
• Build and maintain CI/CD pipelines to build, test, and publish agent containers to ECR.
• Automate environment promotion from dev to test to production with approvals.

Conhecimentos

Cloud/Platform/DevOps

Infrastructure-as-code

Terraform

AWS IAM

Networking

CI/CD

Docker/ECS/EKS

Security/compliance

Ferramentas

Terraform

AWS CDK

CloudFormation

GitHub Actions

GitLab CI

CodePipeline/CodeBuild

Docker

ECS

EKS

Fargate

Descrição da oferta de emprego

About Us

Appnovation is the AI Product Company. Headquartered in Vancouver, Canada, with teams around the world, Appnovation builds AI products, delivers enterprise AI and digital solutions, and co-invests with clients to bring new AI products to market.

About Us

Appnovation is the AI Product Company. Headquartered in Vancouver, Canada, with teams around the world, Appnovation builds AI products, delivers enterprise AI and digital solutions, and co-invests with clients to bring new AI products to market.

Open source has been the foundation of Appnovation's work since 2007, and it remains the foundation underneath every AI product the company builds today. Appnovation teams work with organizations in highly regulated industries, including global leaders such as Pfizer, Google and AstraZeneca, to help them adopt AI they can govern and own.

We’re hiring AWS Cloud Platform Engineers to build and own the platform’s foundation. That means the AWS accounts, networking, identity and infrastructure-as-code everything runs on, plus the path from commit to running agent. Each engineer will have a main focus in one of the two areas below and work closely across both. This is a named-team engagement, so the person we propose is the person who starts.

FOCUS AREAS

• Infrastructure & IaC: Build and own the base AWS layer: accounts, networking, identity boundaries, and the reusable IaC modules the rest of the platform is built from.
• CI/CD & Runtime Deployment: Own the path from commit to running agent: container builds, Amazon ECR, pipelines, environment promotion, and AgentCore Runtime session configuration.

Role Responsibilities

• Account and Environment Foundation: Design and stand up the multi-account AWS structure (Organizations, Control Tower or equivalent) with guardrails and service control policies.
• Networking: Build secure VPC designs and private connectivity (VPC endpoints, PrivateLink, Transit Gateway) so agent workloads can reach internal systems safely.
• Identity Boundaries: Define IAM roles, permission boundaries and least-privilege access for platform services, pipelines and consuming teams.
• Reusable IaC Modules: Build and maintain versioned Terraform and/or AWS CDK modules other teams can use with confidence.
• Build Pipelines: Design and own CI/CD pipelines that build, test, scan and publish agent containers to Amazon ECR.
• Environment Promotion: Automate promotion from dev to test to production with approval gates, rollback and version tracking.
• Runtime Deployment: Configure and deploy agents to AgentCore Runtime, including session settings, scaling, config and secrets handling.
• Golden Path Templates: Build starter repos and pipeline templates so every new agent is set up and shipped the same way.
• Security and Compliance: Build encryption, logging, tagging, image scanning and audit requirements in from the start, working with client security teams.
• Documentation and Enablement: Write module docs, decision records and runbooks so the platform doesn’t depend on any one person.

Qualifications

• 6+ years of cloud, platform or DevOps engineering experience, with at least 4 years hands-on building production AWS environments.
• Strong infrastructure-as-code skills with Terraform and/or AWS CDK/CloudFormation, including writing reusable modules.
• Deep understanding of AWS IAM, including cross-account access, permission boundaries and service control policies.
• Solid AWS networking knowledge: VPC design, routing, VPC endpoints, PrivateLink, Transit Gateway and DNS.
• Hands-on experience building CI/CD pipelines (GitHub Actions, GitLab CI, AWS CodePipeline/CodeBuild or similar).
• Strong container skills: Docker, Amazon ECR, and deploying to ECS, EKS, Fargate or Lambda.
• Experience with secrets and config management (AWS Secrets Manager, Parameter Store).
• Deep hands-on strength in at least one of the two focus areas, and working knowledge of the other.
• Clear communication and comfortable working in a blended client and vendor team.

Preferred Qualifications

• AWS certifications such as Solutions Architect Professional, DevOps Engineer Professional or Advanced Networking.
• Experience with Amazon Bedrock, AgentCore Runtime, or deploying LLM/agent-based applications.
• Experience with policy-as-code and supply chain security tools (e.g., OPA, Checkov, cosign, SBOM tooling, Amazon Inspector).
• Experience in pharma, life sciences or another regulated industry with strict security and change control requirements.

Who You Are

• You think in reusable building blocks and care about the engineers who use them after you
• You default to secure, least-privilege designs and can explain why
• You automate anything you have to do twice
• You write things down so decisions don’t live only in your head
• You work well inside a client team and build trust quickly
• You have prior experience in consulting
• Prior experience and connections in the Life Sciences industry is preferred

Thank you for your interest in a career with Appnovation Technologies! Please note that only those selected for an interview will be contacted.

At Appnovation, we recognize that diverse teams are the strongest teams. Diversity, Equity & Inclusion is not only something that we embrace - we celebrate it! We are proud to be an Equal Opportunity Employer and we encourage applicants from all backgrounds, lived experiences and industries to apply. Come join us at Appnovation, and learn more about how we stay true to our company values as we build better lives through better digital.

Accommodations are available upon request throughout the recruitment process.