Cloud Engineer

Matlen Silver; Charlotte (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Matlen Silver is seeking an AWS Architect with hands-on experience in building Terraform modules and CI/CD pipelines to automate infrastructure across multiple accounts and regions, focusing on RDS/Aurora, DynamoDB, and DocumentDB with cost optimization in mind.

You will implement IAM least-privilege, VPC designs, and monitoring with CloudWatch, Logs, and CloudTrail, using Terraform Enterprise and Bitbucket pipelines.

Qualifications

• 7+ years hands-on Terraform IaC experience
• Experience building reusable IaC modules and managing state/backends
• Strong knowledge of AWS database services (RDS/Aurora, DynamoDB, DocumentDB) and network security
• Hands-on experience with CI/CD tooling and enterprise pipelines

Responsibilities

• Design end-to-end AWS database solutions via Infrastructure as Code (Terraform)
• Build and maintain reusable Terraform modules and state management
• Implement least-privilege IAM, VPC design, and secure, scalable architectures across multi-account/region environments
• Lead Terraform Enterprise policy-as-code and run governance practices

Skills

AWS Architecture

Terraform

CI/CD

Security & IAM

Networking

Tools

Terraform Enterprise

Bitbucket Pipelines

Jenkins

CodePipeline

Ansible

Job description

• Specific AWS Database: RDS, Aurora, PostGres
• Expertise with Terraform and IAM
• Solid communication and soft skills
• Good overall tenure and project durations

AWS Architect with Hands-on experience in building Terraform modules and CI/CD experience using Terrafrom enterprise.

AWS Architecture with strong knowledge on Database products/ IAM/ Network, Hands-on experience with Terraform, Strong CI/CD experience with Bitbucket/Terraform Enterprise. Ansible Playbook experience is plus

Candidate is responsible to design End to End solution for AWS Database products via Infrastructure as code through Terraform

Proven Terraform hands-on experience (7 years) building reusable IaC modules, managing state, workspaces, remote backends, and environment promotion patterns.

Terraform Enterprise (TFE) experience: workspace design, policy-as-code (Sentinel/OPA where applicable), variable management, VCS-driven workflows, and run governance.

Strong CI/CD implementation experience integrating Bitbucket pipelines (or Bitbucket + runners) to automate Terraform plans/applies with quality gates and approvals.

Strong AWS architecture expertise designing secure, scalable, highly available solutions across multi-account and multi-region environments.

Deep knowledge of AWS database services (e.g., RDS/Aurora, DynamoDB, DocumentDB, ElastiCache, OpenSearch) including HA/DR patterns, performance, and cost optimization.

Hands-on IAM expertise: designing least-privilege access, IAM roles/policies, permission boundaries, SCPs, cross-account access, and federation/SSO integration.

Strong AWS networking skills: VPC design, subnets, route tables, NAT/IGW, Transit Gateway, VPC endpoints/PrivateLink, security groups/NACLs, DNS (Route 53), and hybrid connectivity (VPN/Direct Connect).

Security and compliance mindset: encryption (KMS), secrets management (Secrets Manager/Parameter Store), auditability (CloudTrail), logging/monitoring (CloudWatch), and alignment to enterprise controls.

Automation tooling experience (Plus): Ansible playbooks for configuration automation, orchestration, and post-provisioning tasks in hybrid/cloud environments.

Github/Bitbucket/Jenkins/XLR/CodePipeline