Cloud Engineer – AWS Foundation Platform

Stellantis NV; Auburn (AL); On-site; USD 120,000 - 150,000; Full time

Job summary

Stellantis NV is seeking a Cloud Engineer to design, implement, and continuously improve our AWS Landing Zone spanning 1,500+ accounts across NAFTA, LATAM, Europe, EMEA, and APAC. You will build reusable platform components and drive DevOps maturity while operating the AWS organizational layer as a product.

Responsibilities include end-to-end automation, self-service platform development, and IaC pipelines using Terraform and AWS CDK with policy gates and drift detection.

Qualifications

• Bachelor’s degree in computer science, IT, or related field.
• 5+ years designing, deploying, and managing AWS cloud environments at enterprise scale in multi-account contexts.
• Expertise in AWS multi-account services: Control Tower, Organizations, SCPs, and Landing Zone design patterns.
• Expert-level Terraform and/or AWS CDK for IaC; GitOps delivery pipelines with drift detection and policy gates.
• Proficiency in Python and/or TypeScript for building tooling and automation.
• Experience with AI coding assistants and production-quality AI-generated code.
• Strong DevOps and SRE practices: DORA metrics, SLOs, incident management, policy-as-code.
• Knowledge of AWS networking and security services (Security Hub, GuardDuty, IAM).

Responsibilities

• Design and implement end-to-end automation of the AWS account lifecycle for 1,500+ accounts.
• Build a self-service cloud platform enabling onboarding of application teams with an internal portal.
• Own IaC delivery pipelines across accounts using Terraform/AWS CDK with GitOps and drift detection.
• Define and operate SLOs and an observability stack with AI-assisted anomaly detection.
• Manage AWS Control Tower, Organizations, and SCPs with governance and automated drift remediation.
• Apply AI tools for IaC authoring, automation, and runbook maintenance; ensure production-grade outputs.
• Lead post-mortems and translate incidents into systemic engineering improvements.

Skills

Landing Zone design

Terraform

AWS multi-account

Python

TypeScript

GitOps

DevOps

SRE practices

IAM design

Networking (VPC, Transit Gateway)

Security tooling (GuardDuty, SecurityH

Education

Bachelor’s degree in computer science, IT, or related field

Tools

AWS CDK

GitHub Actions

GitLab CI

Terraform

AWS Control Tower

AWS Organizations

SCPs

EventBridge

Lambda

Step Functions

Job description

Stellantis is seeking a skilled and motivated Cloud Engineer to reinforce and support the design, implementation, and continuous improvement of our AWS Foundation Product — an AWS Landing Zone governing 1,500+ AWS accounts distributed across all Stellantis business functions and geographies (NAFTA, LATAM, Europe, EMEA, and APAC). As a Cloud Engineer, you will collaborate with cross-functional teams — including SecOps, FinOps, platform consumers, and global infrastructure teams — to build reusable platform components, drive DevOps maturity, and operate the AWS organizational layer as a product. AI tools are an integral part of daily engineering practice in this team.

Key Responsibilities:

• Design and implement end-to-end automation of the AWS account lifecycle — provisioning, configuration, baselining, and decommissioning — achieving zero-touch operations at scale using Lambda, Step Functions, and EventBridge..
• Build and maintain a self-service cloud platform (account vending machine, network factory, identity federation) enabling application teams to onboard and operate autonomously, backed by an Internal Developer Portal with AI-powered capabilities.
• Own Infrastructure as Code (IaC) delivery pipelines across 1,500+ accounts using Terraform, enforcing GitOps practices, policy-as-code, drift detection, and automated testing at every stage.
• Define and operate SLOs, Error Budgets, and an observability stack with AI-assisted anomaly detection across provisioning, cost, network, and security signals — enabling predictive operations rather than reactive firefighting.
• Manage AWS Control Tower, Organizations, and Service Control Policies (SCPs), enforcing governance, least-privilege IAM, and compliance guardrails with automated self-healing when drift is detected.
• Apply AI tools as a standard daily practice for IaC authoring, automation scripting, test generation, incident analysis, and runbook maintenance — maintaining full engineering ownership of all generated outputs.
• Lead post-mortems and translate every incident into systemic engineering improvements; maintain runbooks and playbooks as versioned, executable artifacts.

Basic Qualifications:

• Bachelor’s degree in computer science, Information Technology, or related field.
• Minimum 5 years of experience designing, deploying, and managing AWS cloud environments at enterprise scale in multi-account contexts.
• Expertise in AWS multi-account services: AWS Control Tower, Organizations, Service Control Policies, and Landing Zone design patterns.
• Expert-level Terraform and/or AWS CDK for Infrastructure as Code; GitOps delivery pipelines with drift detection and policy gates (GitHub Actions, GitLab CI…).
• Proficiency in Python and/or Typescripts for building platform tooling, internal CLIs, automation services, and event-driven workflows (Lambda, Step Functions, EventBridge…).
• Daily use of AI coding assistants (GitHub Copilot, Claude Code, Codex …) with demonstrated ability to review, validate, and own AI-generated code at production quality.
• Solid understanding of DevOps and SRE practices: DORA metrics, SLOs, error budgets, incident management, policy-as-code, and blameless post-mortem culture.
• Strong knowledge of AWS networking: Transit Gateway, VPC design, Route 53, Direct Connect, and PrivateLink.
• Experience with AWS security services: Security Hub, GuardDuty, Config Rules, IAM design, and automated compliance remediation.
• AWS Certifications preferred: DevOps Engineer Professional, Solutions Architect Professional, or Security Specialty.
• Familiarity with AIOps and AI/ML platform services (Amazon Bedrock, SageMaker, Amazon Q Business, DevOps Guru) is a strong plus.