Cloud Engineer

American Chemical Society; Washington (District of Columbia); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Hybrid schedule

Health insurance

Paid time off

Retirement benefits

Job summary

American Chemical Society is seeking an experienced Cloud Engineer to lead AWS cloud implementation, automation, governance, and ongoing operations in a Washington, DC area role.

You will manage multi-account governance, IAM, security, and cost optimization while collaborating with Application, DevOps, SRE, Network, and Security teams. Hybrid onsite/remote work is typical, with a strong focus on IaC and automated delivery.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Engineering, or equivalent experience.
• 8+ years of hands-on AWS cloud services experience.
• Strong knowledge of core AWS services: EC2, VPC, IAM, S3, RDS, Lambda, CloudWatch, CloudTrail, Config, GuardDuty.
• Experience with Terraform and CloudFormation.
• Experience with multi-account governance and security controls.
• Proficient in scripting (Python, Bash) and IaC automation.

Responsibilities

• Manage and support AWS cloud infrastructure across development, staging, and production environments.
• Support AWS multi-account governance using Control Tower, Organizations, and guardrails.
• Manage IAM roles, policies, permission sets, and security groups with least-privilege access.
• Administer IAM Identity Center including account assignments and group-based access.
• Implement and maintain Service Control Policies for security and compliance.
• Deploy infrastructure using Terraform, CloudFormation, AWS CLI, and automation scripts.
• Monitor and troubleshoot networking, compute, storage, and deployment issues.
• Maintain cloud security practices including logging, encryption, and monitoring.
• Create automation scripts to reduce manual tasks; support Git-based deployment workflows.
• Maintain cloud architecture and runbooks; participate in incident resolution.

Skills

Cloud engineering

AWS governance

Automation

Security best practices

CI/CD

Communication

Education

Bachelor's/Master's degree

Tools

Terraform

CloudFormation

IAM/SSO tooling

GitHub Actions

Job description

Description

Position Summary

We are seeking an experienced Cloud Engineer to support the implementation, automation, governance, and ongoing operations of our AWS cloud environment. This role will focus on AWS multi-account management, cloud security, infrastructure automation, identity and access management, networking, monitoring, and cost optimization.

The candidate must have strong hands‑on experience with AWS services such as AWS Control Tower, AWS Organizations, IAM, IAM Identity Center, Service Control Policies, VPC, EC2, S3, RDS, Lambda, CloudWatch, CloudTrail, AWS Config, and GuardDuty. The role also requires infrastructure‑as‑code experience using Terraform and AWS CloudFormation.

The Cloud Engineer will work closely with Application, DevOps, SRE, Network, Security, and other support teams as required.

Key Responsibilities

• Manage and support AWS cloud infrastructure across development, staging, and production environments.
• Support AWS multi‑account governance using AWS Control Tower, AWS Organizations, organizational units, account structure, and guardrails.
• Manage IAM roles, IAM policies, permission sets, permission boundaries, security groups, network access, and least‑privilege access controls.
• Administer AWS IAM Identity Center, including permission sets, account assignments, and group‑based access.
• Implement and maintain Service Control Policies to enforce cloud security, compliance, and operational standards.
• Deploy and manage AWS infrastructure using Terraform, AWS CloudFormation, AWS CLI, and automation scripts.
• Support AWS networking components including VPCs, subnets, route tables, security groups, NACLs, internet gateways, NAT gateways, load balancers, VPN, DNS, and traffic flow configurations.
• Troubleshoot cloud infrastructure issues related to networking, compute, storage, access, permissions, deployments, and application connectivity.
• Monitor cloud resources using CloudWatch, CloudTrail, AWS Config, GuardDuty, and other monitoring and security tools.
• Support cloud security best practices including IAM governance, encryption, logging, secrets management, monitoring, and compliance controls.
• Manage secrets and secure access using tools such as AWS Secrets Manager, AWS Systems Manager Parameter Store, and Delinea.
• Support cost optimization initiatives including resource right‑sizing, reserved instances, savings plans, automated shutdown schedules, budget controls, and cloud usage reporting.
• Create automation scripts using Python, Bash, AWS CLI, or Lambda to reduce manual operational tasks.
• Use Git and CI/CD tools to support infrastructure change management, code reviews, branching, and deployment workflows.
• Maintain documentation for cloud architecture, operational standards, procedures, runbooks, and security controls.
• Participate in operational support, cloud governance, automation initiatives, infrastructure improvements, and production incident resolution as needed.

Required Qualifications

• Bachelor's degree or Master's degree in Computer Science, Information Technology, Engineering, or equivalent work experience.
• 8+ years of hands‑on experience working with AWS cloud services.
• Strong knowledge of core AWS services including EC2, VPC, IAM, S3, RDS, Lambda, CloudWatch, CloudTrail, AWS Config, and GuardDuty.
• Experience with AWS Control Tower, AWS Organizations, IAM Identity Center, Service Control Policies, and multi‑account AWS governance.
• Experience with infrastructure‑as‑code tools such as Terraform and AWS CloudFormation.
• Strong understanding of AWS networking concepts including VPCs, subnets, routing, DNS, load balancing, security groups, NACLs, NAT gateways, internet gateways, and traffic flow.
• Experience with Linux administration and Linux fundamentals.
• Working knowledge of CI/CD tools such as GitHub Actions, Jenkins, AWS CodePipeline, or similar platforms.
• Experience using Git for version control, branching, pull requests, and code reviews.
• Experience with scripting and automation using Python, Bash, AWS CLI, or Lambda.
• Ability to troubleshoot cloud infrastructure, networking, application access, and permission‑related issues.
• Strong understanding of cloud security best practices, IAM policies, encryption, logging, monitoring, and compliance requirements.
• Strong communication skills and ability to work with cross‑functional technical teams, including Application, DevOps, SRE, Network, Security, and Infrastructure teams.

Preferred Qualifications

• AWS certification such as AWS Certified Solutions Architect, AWS SysOps Administrator, or AWS DevOps Engineer.
• Experience with AWS cost management tools such as AWS Cost Explorer, AWS Budgets, Compute Optimizer, or third‑party FinOps tools.
• Experience with centralized logging, cloud governance, tagging standards, account controls, access reviews, and operational reporting.
• Experience supporting enterprise AWS environments with multiple accounts and environments.

Soft Skills

• Strong problem‑solving and troubleshooting skills.
• Strong written and verbal communication skills.
• Ability to explain technical concepts to both technical and non‑technical stakeholders.
• Ability to collaborate with cross‑functional teams.
• Commitment to continuous learning and staying current with cloud technologies.
• Ability to manage priorities, timelines, and multiple workstreams effectively.

Work Environment

This role may support development, staging, and production environments. The Cloud Engineer will participate in operational support, cloud governance, automation initiatives, infrastructure improvements, cost optimization, security improvements, and production incident resolution as needed.

This role is based in our Washington, DC office. A reasonable rate of compensation for this position is between $130,000 - $150,000 per year. ACS employees work a hybrid schedule, consisting of working onsite two days per work week, as decided by functional area. The balance of the week is open to working remotely, though employees are always welcome onsite each day if they choose.

ACS currently provides the following benefits for this position: paid vacation leave, paid sick leave, paid holidays, health insurance, flexible spending account or health care savings account, dental insurance, life insurance, vision insurance, retirement benefits, short- and long‑term disability, and 4-week work from anywhere; each benefit is subject to the terms of the applicable program. Additional benefits may apply based on skills, experience, and location.

Any actual offer of employment, reflecting the total compensation package and benefits, will be made in the sole discretion of ACS. ACS reserves the right to amend or modify its employment benefits and compensation structure at any time.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws.

For further information, please review the Know Your Rights notice from the Department of Labor.