Senior AWS Cloud Engineer

Praesignis (Pty) Ltd; Gauteng; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Praesignis (Pty) Ltd is seeking a highly skilled AWS Cloud Engineer to design, implement, and maintain secure, scalable cloud solutions on AWS for banking-grade workloads. You will work in a regulated environment requiring PCI DSS, SOC 2, ISO 27001, and POPIA compliance.

Role emphasizes IaC (Terraform/CloudFormation/AWS CDK), cloud security, and DevOps practices, with collaboration across Developers, DevOps, and Database Administrators to deliver reliable, high-availability systems.

Qualifications

• Bachelor's degree in computer science, IT, or related field.
• 5–8 years IT experience with 3–5+ years in AWS cloud engineering.
• Strong experience with PCI DSS, SOC 2, ISO 27001, GDPR/POPIA.
• Hands-on Terraform or CloudFormation for large-scale deployments.

Responsibilities

• Design, build, and manage secure AWS cloud environments for regulated banking workloads.
• Implement security controls aligned with banking regulations and standards.
• Develop and maintain IaC pipelines using Terraform, CloudFormation, or AWS CDK.
• Monitor and optimize cloud operations with AWS native tools and observability stacks.
• Collaborate with Developers, DevOps, and DBAs to deliver scalable solutions.

Skills

AWS Cloud Engineering

DevOps

Linux/Unix

Networking & Security

Education

Bachelor's degree

Tools

Terraform

CloudFormation

AWS CDK

Kubernetes

Docker

Splunk

Datadog

ELK Stack

Job description

We are seeking a highly skilled AWS Cloud Engineer with strong experience in banking or financial services to design, implement, and maintain secure, scalable, and compliant cloud solutions on Amazon Web Services (AWS). The ideal candidate will have a proven track record of delivering enterprise-grade cloud infrastructure within regulated environments, ensuring adherence to financial industry standards such as PCI DSS, SOC 2, and ISO 27001.

This role requires expertise in cloud architecture, automation and DevOps practices, along with a deep understanding of data security, compliance and high-availability systems critical to banking operations.

Key Responsibilities: Cloud Architecture & Design

• Design, build, and manage secure, high-performance AWS cloud environments that meet banking-grade standards for security, resiliency, and compliance.

Security & Compliance

• Implement and manage security controls aligned with banking regulations

Infrastructure as Code & Automation

• Develop and maintain Infrastructure as Code (IaC) using Terraform, CloudFormation, or AWS CDK to automate provisioning and configuration.

Cloud Operations & Support

• Monitor cloud resources and performance using CloudWatch, CloudTrail, GuardDuty, and Security Hub.

Collaboration & Leadership

• Partner with Developers, DevOps Engineers, and Database Administrators to deliver secure and scalable solutions.

Preferred Skills & Certifications:

• Experience with Kubernetes/EKS, Docker, or containerized application deployments.
• Knowledge of hybrid cloud or on-prem to cloud migration strategies (VMware Cloud on AWS, Outposts).
• Familiarity with data lake architectures (AWS Lake Formation, Glue, Redshift) for financial analytics.
• Experience with monitoring and logging tools (Splunk, Datadog, ELK Stack

Required Qualifications & Experience:

• Bachelor’s degree in computer science, Information Technology, or related field (or equivalent experience).
• 5–8 years of professional IT experience, with 3–5+ years focused on AWS cloud engineering.
• Proven expertise in key AWS services, including:
• Compute: EC2, Lambda, Auto Scaling
• Storage: S3, EBS, Glacier
• Networking: VPC, Direct Connect, Transit Gateway, Route 53
• Database: RDS, DynamoDB, Aurora
• Security: IAM, KMS, WAF, Shield, Security Hub
• Strong knowledge of financial industry security standards (PCI DSS, SOC 2, ISO 27001, POPIA, GDPR).
• Experience implementing multi-account AWS Organizations with Service Control Policies (SCPs).Hands‑on experience with Terraform or CloudFormation for large‑scale deployments.
• Proficiency with Linux/Unix system administration, shell scripting (Bash, Python, PowerShell).
• Strong understanding of networking concepts (firewalls, VPNs, DNS, load balancers, private connectivity).
• Demonstrated ability to build high‑availability, fault‑tolerant architectures for financial applications.