AWS Platform Engineer — AI, IaC & Cloud Security

Clark Holdings Inc.; McLean (VA); Hybrid; USD 65,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Job summary

Clark Holdings Inc. seeks an experienced AWS Platform Engineer to build and safeguard our AWS cloud ecosystem. You will own end-to-end lifecycle of AWS tenant accounts, leveraging IaC and deploying AI services like AWS Bedrock to optimize performance and cost.

The role is on-site with participation in on-call rotations and maintenance windows. You will drive security, governance, observability, and FinOps across multiple tenants.

Qualifications

• Experience with AWS Organizations, Control Tower, and core services.
• Proficiency in automating infrastructure with IaC tools (Terraform, CloudFormation, or Pulumi).
• Strong observability mindset with dashboards, alerts, and log aggregation.
• Ability to manage PagerDuty rotations and perform root-cause analysis (RCA).
• Familiarity with AI/LLM infrastructure and AWS Bedrock is a plus.

Responsibilities

• Provision and manage AWS tenant accounts per AWS Well-Architected Framework.
• Enforce security policies (IAM, SCPs, GuardDuty) across environments.
• Manage resources for tenants (S3, Lambda, RDS).
• Operate and monitor AWS Bedrock deployments and model access.
• Implement guardrails for Generative AI usage within tenants.

Skills

AWS

Terraform/AWS CDK

Observability

PagerDuty/Incident Mgmt

Networking

Scripting (PowerShell/Bash/Python)

Security Best Practices

Education

Bachelor’s degree in CS/IT or related

Tools

Terraform

CloudFormation

Pulumi

Job description

Clark Holdings Inc. seeks an experienced AWS Platform Engineer to build and safeguard our AWS cloud ecosystem. You will own end-to-end lifecycle of AWS tenant accounts, leveraging IaC and deploying AI services like AWS Bedrock to optimize performance and cost.

The role is on-site with participation in on-call rotations and maintenance windows. You will drive security, governance, observability, and FinOps across multiple tenants.