AWS Platform Engineer

Clark Holdings Inc.; McLean (VA); Hybrid; USD 65,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Job summary

Clark Holdings Inc. seeks an experienced AWS Platform Engineer to build and safeguard our AWS cloud ecosystem. You will own end-to-end lifecycle of AWS tenant accounts, leveraging IaC and deploying AI services like AWS Bedrock to optimize performance and cost.

The role is on-site with participation in on-call rotations and maintenance windows. You will drive security, governance, observability, and FinOps across multiple tenants.

Qualifications

• Experience with AWS Organizations, Control Tower, and core services.
• Proficiency in automating infrastructure with IaC tools (Terraform, CloudFormation, or Pulumi).
• Strong observability mindset with dashboards, alerts, and log aggregation.
• Ability to manage PagerDuty rotations and perform root-cause analysis (RCA).
• Familiarity with AI/LLM infrastructure and AWS Bedrock is a plus.

Responsibilities

• Provision and manage AWS tenant accounts per AWS Well-Architected Framework.
• Enforce security policies (IAM, SCPs, GuardDuty) across environments.
• Manage resources for tenants (S3, Lambda, RDS).
• Operate and monitor AWS Bedrock deployments and model access.
• Implement guardrails for Generative AI usage within tenants.

Skills

AWS

Terraform/AWS CDK

Observability

PagerDuty/Incident Mgmt

Networking

Scripting (PowerShell/Bash/Python)

Security Best Practices

Education

Bachelor’s degree in CS/IT or related

Tools

Terraform

CloudFormation

Pulumi

Job description

We are seeking a highly skilled AWS Platform Engineer to build and safeguard our AWS cloud ecosystem. You will be responsible for the end-to-end lifecycle of AWS tenant accounts, ensuring a secure, cost-optimized, and observable environment. You will bridge the gap between infrastructure and development by leveraging Infrastructure as Code (IaC) and deploying advanced AI services like AWS Bedrock. This is an on-site position that also requires participation in an on-call rotation and availability during scheduled maintenance windows.****Key Responsibilities:********Cloud Governance & Architecture***** Account Provisioning: Set up and configure AWS tenant accounts in alignment with the AWS Well-Architected Framework.* Security & Compliance: Enforce company security policies (IAM, SCPs, GuardDuty) to maintain a robust security posture across all environments.* Resource Management: Enable, disable, and govern the usage of core AWS services for tenants, including S3, Lambda, and Postgres (RDS).****AI Infrastructure Management***** AWS Bedrock Operations: Manage and monitor AWS Bedrock deployments, ensuring model access, throughput limits, and performance metrics are optimized for tenant needs.* Governance: Implement guardrails for Generative AI usage within the tenant accounts.****Automation & DevOps Enablement***** Infrastructure as Code (IaC): Establish and maintain IaC procedures (Terraform, CloudFormation, or Pulumi) to streamline deployment and enable seamless DevOps workflows.* Incident Management: Configure and maintain PagerDuty integrations to ensure rapid response to infrastructure alerts and system health issues.****Observability & FinOps***** Monitoring: Set up comprehensive monitoring and logging stacks using CloudWatch, X-Ray, or third-party tools to ensure 360-degree visibility.* FinOps: Implement cost-allocation tags, budgets, and reporting to drive financial accountability and identify cost-saving opportunities for tenants.****IP Networking***** Manage and troubleshoot TCP/IP networking, including subnetting, routing, and network protocols (DNS, DHCP, HTTP/HTTPS, SSH).* Analyze network traffic and diagnose network issues.* Manage hybrid network connections.****Security***** Implement and maintain computer and systems security best practices.* Perform vulnerability management and patch management.* Utilize security monitoring tools (SIEM, IDS/IPS).* Respond to security incidents and perform malware analysis.* Implement security auditing and compliance.* Implement and maintain least privilege access.****Customer Service***** Provide prompt and professional technical support to end users.* Clearly communicate technical information to non-technical users.* Resolve user issues efficiently and effectively.* Maintain a positive and helpful attitude.****Mentorship***** Mentor junior team members on technical skills and best practices.* Provide guidance and support for career development.* Share knowledge and expertise with the team.****Maintenance Windows***** Attend scheduled maintenance windows every other month on the third Saturday.****On-Call Rotation***** Participate in an on-call rotation to provide 24/7 support for critical systems.****Basic Qualifications:***** AWS Expertise: Proven experience with AWS Organizations, Control Tower, and core services (Compute, Storage, Database).* IaC Proficiency: Strong background in automating infrastructure with Terraform or AWS CDK.* Observability Mindset: Experience setting up dashboards, alerts, and log aggregation.* Problem Solver: Ability to manage PagerDuty rotations and lead root-cause analysis (RCA).* Emerging Tech: Familiarity with LLM infrastructure and AI services (specifically AWS Bedrock) is a significant plus.* Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).* Minimum of 5+ years of experience in systems administration.* Proficiency in AWS* Deep understanding of TCP/IP networking, network protocols, and ports.* Strong skills in computer and systems security best practices.* Experience with scripting languages (PowerShell, Bash, Python).* Excellent troubleshooting and problem-solving skills.* Strong communication and teamwork skills.* Relevant certifications (e.g. AWS Certified SysOps Administrator – Associate, Azure Administrator Associate, CompTIA Security+, CISSP) are highly desirable.****Preferred Qualifications:***** Experience with automation tools (Ansible, Chef).* Experience with security frameworks (NIST, ISO 27001).* Experience with FedRAMP Moderate and High offerings from AWS* AWS Certified Cloud PractitionerThe work environment and requirements described below are representative of those necessary for an employee to successfully perform the essential functions of this role. ****The Physical Side of the Role:**** Given that a good portion of your day will be spent at a desk, you should be comfortable with prolonged periods of focused work, whether it's collaborating with colleagues, analyzing data, or developing strategies. The role demands effective communication and sharp visual acuity for reviewing complex documents and performing detailed computer work. While there are times for quiet concentration, you'll also be expected to move actively throughout the office and travel occasionally to various locations, including dynamic construction sites, utilizing different modes of transportation. The ability to lift and move objects up to 10 pounds regularly, and up to 25 pounds on occasion (think a box of files or small office equipment), is also required.****Your Work Environment:**** Your primary workspace will be in our professional office, which has a typical, quiet-to-moderate noise and light levels. As part of your work, you may also be required to visit active construction sites. These environments are naturally more dynamic and can include exposure to outdoor weather conditions, louder noise, and moving equipment. Your safety is our top priority, and you'll be expected to follow Clark Construction's safety policies and procedures, and all applicable laws, at all locations.****Our High-Performing Culture:**** This is a demanding, high-performance environment. We are looking for candidates who are energized by challenge, thrive under pressure, and are prepared to do what it takes to achieve exceptional results. Success in this role requires significant commitment, including flexibility to work extended hours, especially during critical project phases or client deadlines. Beyond regular working hours, there will be occasions where business needs require your attention, particularly for time-sensitive matters or emergencies. You are expected to monitor and respond to communications (phone calls, emails, text messages) as required to address these situations effectively. Your ability to manage these expectations and be responsive when critical issues arise is key to your success in this role and our collective success as a team.****A Drug Free Workplace:**** Clark promotes a drug free workplace. A pre-employment drug “fitness for duty” screening is required, and the company conducts random quarterly drug “fitness for duty” tests.Clark offers a total compensation package that includes base salary, bonus potential, and a comprehensive benefits package including health/dental/vision benefits, paid time off, retirement/401k, and Company Contribution plan. Additional benefits include life insurance, commuter benefit, short & long term disability, fitness reimbursement, FSA, tuition reimbursement, back-up daycare, tutoring & family support benefits, EAP/Work-Life assistance, and a holiday contribution program. For this role the base salary range is $65,000-$170,000. Compensation may vary outside of this range depending on a number of factors, including a candidate’s education, experience, skills, and geographic location. Base pay is one part of the Total Compensation Package that is provided to compensate and recognize employees for their work.