Overview:

A hands-on Senior AWS Cloud Engineer who has experience with building secure AWS Landing zones is required to join client's Cyber Security team. The role requires deep AWS expertise across a broad range of services, with a robust focus on IAM, infrastructure automation, security, and platform reliability. The successful candidate will be self-sufficient, proactive, and comfortable operating across cloud engineering and security disciplines.

Key Responsibilities

- Experience in building secure AWS Landing zones.
- Expertise in AWS IAM - IAM roles, policies, permission boundaries, IAM Identity Centre (SSO), federated identity, and least-privilege access controls across accounts
- Create, deploy, debug, and fix issues with AWS CloudFormation Stacks and StackSets across multi-account and multi-region environments
- Implement and maintain Infrastructure as Code using Terraform / OpenTofu, CloudFormation, and related tooling
- Manage AWS Organisations where required including SCPs, OUs, and account governance
- Own and manage core AWS Networking and Identity — VPCs, Transit Gateways, Direct Connect, VPN, Route 53, Security Groups, NACLs.
- Design, build, and maintain CI/CD pipelines using GitLab CI, GitHub Actions, or other modern CI/CD solutions
- Build and manage containerised workloads using Docker and Kubernetes




- Apply Secure SDLC principles throughout the infrastructure and application delivery lifecycle
- Operate and improve Cloud Security Posture Management (CSPM) tooling and processes
- Independently diagnose and resolve complex cloud infrastructure and security issues

Skills & Experience Required

Area

Requirement

AWS

Expertise across most core AWS services

CloudFormation

Expert — Stacks, StackSets, debugging, fixing

IaC

Terraform / OpenTofu, CloudFormation — production experience

AWS Organisations

Multi-account management and governance

Networking & Identity

VPC, TGW, Direct Connect, VPN, Route 53, Security Groups, NACLs, IAM roles, policies, permission boundaries, IAM Identity Centre (SSO), federated identity

CI/CD

GitLab CI, GitHub Actions or equivalent

Containers

Docker and Kubernetes

Secure SDLC

Security embedded across the delivery lifecycle

CSPM

Hands-on posture management experience

Coding

Hands on experience with python/bash/powershell or other scripting or programming languages.

Behaviours

- Proactive and hands-on — acts independently without waiting to be directed
- Strong team player — collaborates across engineering and security functions
- Self-sufficient — able to solve complex problems independently
- Continuously improves the platforms and processes they own

📌 Senior Aws Cloud Engineer (Mumbai)
🏢 wissen technology
📍 Mumbai