AWS Cloud Platform Engineer: IaC & CI/CD Lead

Appnovation; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Appnovation is hiring AWS Cloud Platform Engineers to own the platform foundation, including AWS accounts, networking, identity boundaries, and reusable IaC modules. You will own CI/CD pipelines, container builds, and environment promotion from development to production, working across client and vendor teams in a regulated environment.

The role emphasizes securing and automating infrastructure, with focus on scalable runtimes, templates, and documentation to enable consistent agent delivery

Qualifications

• 6+ years of cloud, platform or DevOps engineering experience with hands-on AWS production environments.
• Strong infrastructure-as-code skills with Terraform and/or AWS CDK/CloudFormation, including reusable modules.
• Deep understanding of AWS IAM, including cross-account access, permission boundaries and service control policies.
• Solid AWS networking knowledge: VPC design, routing, VPC endpoints, PrivateLink, Transit Gateway and DNS.
• Hands-on experience building CI/CD pipelines (GitHub Actions, GitLab CI, AWS CodePipeline/CodeBuild or similar).
• Strong container skills: Docker, Amazon ECR, and deploying to ECS, EKS, Fargate or Lambda.
• Experience with secrets and config management (AWS Secrets Manager, Parameter Store).
• Deep hands-on strength in at least one focus area and working knowledge of the other.

Responsibilities

• Design and stand up multi-account AWS structure (Organizations, Control Tower or equivalent) with guardrails and SCPs.
• Build secure VPC designs and private connectivity for agent workloads.
• Define IAM roles, permission boundaries and least-privilege access for services and pipelines.
• Build and maintain reusable Terraform and/or CDK modules for platform use.
• Design and own CI/CD pipelines to build, test, scan and publish agent containers to ECR.
• Automate environment promotion from dev to test to production with gates and version tracking.
• Configure and deploy agents to Runtime, including session settings and secrets handling.
• Create starter repos and templates to standardize agent setup and shipping.
• Incorporate encryption, logging, tagging, image scanning and audit requirements from the start.
• Write module docs and runbooks so the platform isn’t person-dependent.

Skills

Cloud engineering

DevOps

IAM

Terraform

CI/CD

Containerization

Security

Documentation

Tools

Terraform

AWS CDK

CloudFormation

GitHub Actions

GitLab CI

CodePipeline/CodeBuild

Docker

ECR / ECS / EKS

Job description

Appnovation is hiring AWS Cloud Platform Engineers to own the platform foundation, including AWS accounts, networking, identity boundaries, and reusable IaC modules. You will own CI/CD pipelines, container builds, and environment promotion from development to production, working across client and vendor teams in a regulated environment.

The role emphasizes securing and automating infrastructure, with focus on scalable runtimes, templates, and documentation to enable consistent agent delivery