Cloud Platform Engineer

Systechcorp Inc; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Systechcorp Inc. seeks an experienced AWS Cloud Infrastructure Engineer to lead network segmentation, ECS to Fargate migrations, and management of OpenSearch and log pipelines.

You will design multi-account CloudFormation templates, automate rollbacks, and ensure secure, scalable deployments across environments. You will own the OpenSearch layer, implement QRadar integration, and validate performance through load testing and end-to-end connectivity checks post-migration.

Qualifications

• 6+ years AWS cloud infrastructure engineering.
• 3+ years on network segmentation and containerised workloads.
• AWS networking expert with VPC, NACLs, SGs, Transit Gateway and Network Firewall.
• ECS/Fargate: task definitions, awsvpc networking, ALB/NLB targets, EFS, auto scaling.
• CloudFormation: multi-account templates, linting and compliance checks.
• OpenSearch: cluster deploy, ILM, RBAC, ingest pipelines.

Responsibilities

• Implement network segmentation templates and manage multi-account environments.
• Migrate ECS to Fargate, configure awsvpc, ALB/NLB, and EFS mappings.
• Develop rollback automation for NACL/SG changes and ECS task updates.
• Own OpenSearch platform: clusters, ILM, RBAC, and ingest pipelines.
• Integrate QRadar: Filebeat/Logstash, DSM mapping, end-to-end validation.
• Conduct load tests and validate post-migration traffic and latency.
• Maintain CI/CD pipelines via Jenkins/Bitbucket and IaC automation.
• Support OS patching and testing for WS1/WS3 deployments.

Skills

AWS cloud infra

Network segmentation

ECS & Fargate

CloudFormation

OpenSearch

Log pipelines

Jenkins/Bitbucket

Ansible

Rollback automation

Terraform (noted)

Tools

CloudFormation

AWS VPC

Transit Gateway

Network Firewall

ECS/Fargate

ALB/NLB

EFS

Application Auto Scaling

OpenSearch

Filebeat

Logstash

QRadar

Ansible

Jenkins

Bitbucket

CFN-LINT

cfn-nag

CloudWatch

AWS CLI

Python/Boto3

Job description

Key Responsibilities

• Implement WS1 network segmentation author parameterised CloudFormation templates for NACL and Security Group three-tier enforcement across all 8 multi-account environments; coordinate Transit Gateway routing and Network Firewall egress impact with the Cloud/Infrastructure Lead
• Execute WS3 ECS-to-Fargate migration update all ECS task definitions to Fargate launch type, configure awsvpc networking, create new ALB target groups, implement the CAS port change, simplify EFS mount points, configure horizontal auto-scaling, and execute connectivity validation
• Build and test WS1 and WS3 rollback automation NACL/SG CloudFormation stack revert, Fargate task-definition rollback to previous ECS configuration; test in non-production before any production window
• Own the OpenSearch platform layer for WS8 — deploy OpenSearch clusters per environment, design index templates and ILM policies, configure RBAC (fine-grained access control), set retention policies, build ingest pipelines for log transformation
• Integrate QRadar log forwarding for WS8 — configure Filebeat or Logstash pipeline, field mapping to QRadar DSM schema, validate end-to-end log flow in partnership with the Security Engineering Lead (event routing) and Senior Java Governance Lead (application logging contract)
• Conduct load testing and connectivity validation for WS3 post-migration — verify application traffic flows correctly through new ALB target groups, measure latency, validate EFS performance
• All delivery through the Jenkins/Bitbucket/CloudFormation pipeline — no direct console changes on restricted accounts; coordinate with the Restricted-Account Cloud Engineer for restricted-account deployments
• Support the Cloud Engineer OS/Patching as backup on WS1 template testing in ITE/QA environments

Must-Have Skills & Experience

• 6+ years AWS cloud infrastructure engineering; 3+ years on network segmentation and containerised workload delivery
• AWS networking expert — VPC (NACL and Security Group three-tier design), Transit Gateway route tables and attachment policies, AWS Network Firewall stateful rule groups, PrivateLink, VPC Flow Logs delivery to S3 and CloudWatch
• ECS and Fargate — task definition authoring (Fargate launch type), awsvpc networking model, ALB/NLB target group configuration, EFS mount points, Fargate service auto-scaling (Application Auto Scaling), container health checks
• CloudFormation — parameterised multi-account templates, CFN-LINT and cfn-nag compliance, cross-stack references, Conditions and Mappings
• OpenSearch (or Elasticsearch) — cluster deployment on AWS, index template design, Index Lifecycle Management (ILM) policy authoring, fine-grained access control (RBAC), ingest pipeline configuration
• Log pipeline tooling — Filebeat or Logstash configuration for log forwarding, field mapping, QRadar DSM integration, pipeline testing and validation
• Load testing and connectivity validation — AWS-native or third-party tooling to validate post-migration traffic flows, latency, and throughput
• Jenkins and Bitbucket — pipeline execution, IaC deployment automation, PR workflow
• Ansible — playbook authoring for infrastructure configuration tasks supporting WS1/WS3 deployment
• Rollback automation — CloudFormation stack revert scripts, Fargate task-definition rollback runbooks, tested in non-production

Nice-to-Have Skills

• AWS Advanced Networking Specialty certification
• AWS Network Firewall — centralized egress via Transit Gateway, domain allowlist stateful rule groups
• OpenSearch Dashboards (Kibana) — dashboard design for log observability and operational visibility
• ECS Service Connect or AWS App Mesh — service mesh context for post-Fargate migration
• Filebeat and Logstash — advanced pipeline configuration including dead-letter queues and back-pressure handling
• Terraform — IaC cross-referencing context even though this engagement uses CloudFormation

Tools & Platforms

CloudFormation, AWS VPC (NACLs, Security Groups), Transit Gateway, Network Firewall, ECS/Fargate, ALB/NLB, EFS, Application Auto Scaling, OpenSearch (cluster management, index templates, ILM, RBAC, ingest pipelines), Filebeat, Logstash, QRadar (integration), Ansible, Jenkins, Bitbucket, CFN-LINT, cfn-nag, VPC Flow Logs, CloudWatch, AWS CLI, Python/Boto3