Cloud Engineer

ValueMomentum; Erie (Erie County); On-site; USD 140,000 - 190,000; Full time

Job summary

ValueMomentum is seeking an experienced AWS Platform Engineer to design, deploy, and maintain scalable cloud platforms in a long-term engagement. You will build multi-account environments, define reusable patterns, and provide self-service infrastructure via IaC and platform abstractions.

The role requires 6–8 years of hands-on AWS experience, strong networking, scripting, and container orchestration skills, with collaboration across teams in a dynamic engineering center.

Qualifications

• Bachelor’s in Computer Science, Engineering, or equivalent practical experience.
• 6–8 years of hands-on experience in AWS cloud and platform engineering roles.
• Strong expertise in AWS networking services (VPC, Route Tables, IGW, NAT).
• Proficiency in scripting (Python, Bash, or PowerShell) and IaC tools (Terraform, CloudFormation, CDK).
• Experience with containers and orchestration (Docker, Kubernetes, EKS).
• Excellent troubleshooting and collaboration skills.

Responsibilities

• Design, deploy, and maintain highly available, scalable, and secure AWS cloud platforms.
• Build and manage multi-account AWS environments using AWS Organizations and Control Tower.
• Define reusable cloud patterns, blueprints, and reference architectures.
• Enable self-service infrastructure for application teams through IaC and platform abstractions.

Skills

AWS cloud

Platform engineering

Networking fundamentals

Scripting

IaC (Terraform, CloudFormation, CDK)

Containers (Docker, Kubernetes, EKS)

Troubleshooting distributed systems

Communication & collaboration

Education

Bachelor’s in Computer Science, Engineering, or equivalent

Tools

Terraform

CloudFormation

AWS CDK

Docker

Kubernetes

EKS

Job description

Duration: Long Term

Skills:

• Bachelor’s in Computer Science, Engineering, or equivalent practical experience.
• 6–8 years of hands‑on experience in AWS cloud and platform engineering roles.
• Strong expertise in AWS networking services, including:
• VPC, Route Tables, IGW, NAT
• Transit Gateway, Direct Connect, VPN
• In-depth knowledge of core AWS services:
• EC2, S3, IAM, RDS, Lambda, ECS/EKS
• Strong understanding of networking fundamentals (TCP/IP, DNS, routing, CIDR).
• Proficiency in scripting/programming (Python, Bash, or PowerShell).
• Hands‑on experience with IaC tools (Terraform, CloudFormation, AWS CDK).
• Experience with containers and orchestration (Docker, Kubernetes, EKS).
• Excellent troubleshooting and problem‑solving skills in distributed systems.
• Strong communication and collaboration skills.

Nice-to-Have / Plus

• Experience with platform engineering or internal developer platforms (IDP).
• Exposure to service mesh, ingress controllers, or advanced traffic management.
• AWS Certifications such as:
• AWS Certified Solutions Architect – Professional
• AWS Advanced Networking – Specialty
• Experience with CI/CD tools and GitOps workflows.

Responsibilities:

• Design, deploy, and maintain highly available, scalable, and secure AWS cloud platforms.
• Build and manage multi‑account AWS environments using AWS Organizations and Control Tower.
• Define reusable cloud patterns, blueprints, and reference architectures.
• Enable self‑service infrastructure for application teams through IaC and platform abstractions.

AWS Networking (Expanded Focus)

• Design and manage VPC architectures, including subnets, route tables, IGWs, NAT Gateways, and security boundaries.
• Implement hub‑and‑spoke and multi‑VPC networking using AWS Transit Gateway.
• Configure and manage VPC Peering, AWS PrivateLink, and VPC Endpoints (Interface & Gateway).
• Design hybrid connectivity using AWS Direct Connect, Site‑to‑Site VPN, and Client VPN.
• Manage Load Balancing using ALB, NLB, and ELB, including TLS termination and traffic routing strategies.
• Implement DNS and traffic management using Amazon Route 53 and AWS Global Accelerator.
• Configure and enforce network security using:
• AWS Network Firewall
• AWS Firewall Manager
• AWS WAF & AWS Shield
• Security Groups and NACLs
• Implement IP address management (AWS VPC IPAM) and network observability.
• Troubleshoot complex network latency, routing, and connectivity issues across distributed systems.

Automation & Infrastructure as Code

• Develop and maintain Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, or AWS CDK.
• Automate provisioning, configuration, and lifecycle management of cloud resources.
• Integrate IaC with CI/CD pipelines for automated platform deployments.

Observability, Reliability & Operations

• Implement monitoring, logging, and alerting using Amazon CloudWatch, CloudTrail, and third‑party tools.
• Drive platform reliability through SRE practices, incident management, and root cause analysis.
• Optimize cost, performance, and availability across cloud platforms.

Security & Compliance

• Enforce security best practices, IAM policies, and least‑privilege access.
• Ensure compliance with organizational and regulatory standards.
• Implement network and platform security controls by design (security‑by‑default).
• Partner with application and DevOps teams to guide architectural decisions.
• Provide technical mentorship and documentation for cloud and platform usage.
• Participate in on‑call rotations and support production incidents.

At ValueMomentum’s Technology Center, we are a team of passionate engineers who thrive on tackling complex business challenges with innovative solutions while transforming the P&C insurance value chain. We achieve this through strong engineering foundation and continuously refining our processes, methodologies, tools, agile delivery teams, and core engineering archetypes. Our core expertise lies in six key areas: Cloud Engineering, Application Engineering, Data Engineering, Core Engineering, Quality Engineering, and Domain expertise

ValueMomentum is an Equal Opportunity Employer committed to fostering a diverse and inclusive workplace. We make all employment decisions based on qualifications, merit, and business needs, without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, protected veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law.

We are also committed to providing reasonable accommodations to qualified individuals with disabilities and applicants throughout the recruitment process, in accordance with applicable laws.