Sr AWS Cloud Engineer

Role : Sr AWS Cloud EngineerLocation : SFO CA (onsite)Must have : AWS certificationsWe are seeking a driven Sr AWS Cloud Engineer with a strong foundation in cloud platform engineering, security, and operations. This role is ideal for a self‑starter and go‑getter who takes pride in designing systems that are secure by design, verifiable by default, and continuously ready for internal and external scrutiny.What You’ll DoDesign and operate AWS cloud environments that are secure, scalable, and operationally matureOwn reliability, security, and operational health of cloud environmentsLead initiatives independently from concept through deliveryPartner with application teams to enable secure self‑service cloud capabilitiesProactively identify risks, gaps, and process weaknesses and drive improvementsDevelop automation and tooling using modern scripting and programming languagesWhat You Bring (Required)Strong hands-on experience with AWS cloud servicesDeep understanding of cloud security and compliance fundamentals, including:Organizational‑level identity and access governanceIdentity and access management (IAM), Least privilege principlesLogging, monitoring, and traceabilityEncryption and data protectionConfiguration standardization and drift preventionExperience with preventive and detective guardrails to ensure systems remain within defined security and operational boundariesProven ability to lead initiatives independentlySelf‑starter mentality — proactive, decisive, and execution‑focusedHands‑on experience with Infrastructure as Code (CloudFormation or Terraform)Automation & scripting experience with Python, JavaScript, or ShellStrong hands-on CI/CD pipelines that enforce security by default, including policy checks and approval gatesNice to HaveExperience with AWS networking (VPCs, subnets, routing, dns)AWS Multi-Account Control Tower / Account Factory experienceFamiliarity with compliance frameworks (SOC 2, ISO 27001, PCI, HIPAA)AWS certifications (Security, Solutions Architect, SysOps)Containers (ECS/EKS) or serverless architectures (Lambda)