AWS Cloud Platform Engineer

New Yorkfull timeOn Site

Apply on Employer Site

mid

H1B: no

Appnovation AWS Cloud Platform Engineer at Appnovation builds and owns the platform foundation including AWS accounts, networking, identity, and infrastructure-as-code. The role focuses on multi-account AWS structure, secure networking, IAM roles, reusable IaC modules, CI/CD pipelines, environment promotion, runtime deployment, security, and documentation.

Responsibilities

Design and stand up the multi-account AWS structure with guardrails and service control policies
Build secure VPC designs and private connectivity such as VPC endpoints, PrivateLink, Transit Gateway
Define IAM roles, permission boundaries and least-privilege access for platform services and pipelines
Build and maintain versioned Terraform and/or AWS CDK modules
Design and own CI/CD pipelines that build, test, scan and publish agent containers to Amazon ECR
Automate environment promotion from dev to test to production with approval gates, rollback and version tracking
Configure and deploy agents to AgentCore Runtime including session settings, scaling, config and secrets handling
Build starter repos and pipeline templates for consistent agent setup and shipping
Build encryption, logging, tagging, image scanning and audit requirements working with client security teams
Write module documentation, decision records and runbooks

Qualification

6+ years of cloudDeep understanding of AWS IAMSolid AWS networking knowledgeStrong container skillsYou default to secureExperience with Amazon BedrockExperience in pharma

Required

6+ years of cloud, platform or DevOps engineering experience, with at least 4 years hands-on building production AWS environments.
Strong infrastructure-as-code skills with Terraform and/or AWS CDK/CloudFormation, including writing reusable modules.
Deep understanding of AWS IAM, including cross-account access, permission boundaries and service control policies.
Solid AWS networking knowledge: VPC design, routing, VPC endpoints, PrivateLink, Transit Gateway and DNS.
Hands-on experience building CI/CD pipelines (GitHub Actions, GitLab CI, AWS CodePipeline/CodeBuild or similar).
Strong container skills: Docker, Amazon ECR, and deploying to ECS, EKS, Fargate or Lambda.
Experience with secrets and config management (AWS Secrets Manager, Parameter Store).
Deep hands-on strength in at least one of the two focus areas, and working knowledge of the other.
Clear communication and comfortable working in a blended client and vendor team.
You think in reusable building blocks and care about the engineers who use them after you
You default to secure, least-privilege designs and can explain why
You automate anything you have to do twice

Preferred

AWS certifications such as Solutions Architect Professional, DevOps Engineer Professional or Advanced Networking.
Experience with Amazon Bedrock, AgentCore Runtime, or deploying LLM/agent-based applications.
Experience with policy-as-code and supply chain security tools (e.g., OPA, Checkov, cosign, SBOM tooling, Amazon Inspector).
Experience in pharma, life sciences or another regulated industry with strict security and change control requirements.

Benefits

Equity/RSU

Company

Appnovation

View company page

Source: greenhouse

Active within the past hour

More roles at Appnovation

Senior Product Owner, Adobe Experience Manager (AEM)

New York

Senior Web Technical Product Manager

New York

Web Platforms Engineer

New York

Site Reliability Engineer, AI Observability

New York