AWS Cloud Engineer #10905

ECCO Select is a talent acquisition and consulting company specializing in people, process and technology solutions. We provide the talent behind the technology enabling our clients to achieve their goals. For more information about ECCO Select, visit us at www.eccoselect.com.

W2 Only - no C2C

Position Title: Cloud Engineer – AWS

Location Information

Dallas, Las Vegas, Atlanta or Chicago (Hybrid – Onsite 3 days a week)

Position Responsibilities:

We are seeking a Cloud Engineer with AWS expertise for a hands-on, hybrid role focused on building and maintaining a highly reliable and modern cloud platform. This position requires engagement with engineering and application teams, supporting migrations, automating infrastructure, and enabling secure, cost-effective, and seamless infrastructure services.

• Lead and participate in wave-based workloads and application migrations using AWS 5R strategies and modernization techniques, collaborating with application owners to ensure secure, safe, and minimal downtime cutovers across AWS compute, storage, database, and serverless platforms.
• Develop and manage an Infrastructure as Code (IaC) environment with Terraform – focusing on reusable modules, policy-as-code, state management, and robust tagging strategies.
• Create and own CI/CD automation pipelines and templates (primarily in GitHub Actions) for build, test, scan, and deployment workflows; support drift remediation and continuity of development/staging/production environments.
• Oversee containerized and serverless compute platforms (including ECS, EKS, Fargate, Lambda, and API Gateway), standardizing Docker image builds, software deployment patterns (such as blue/green and canary releases), as well as assisting in the operation and backup of AWS-managed databases.
• Implement security best practices including least-privilege IAM, KMS, WAF, and Secrets Manager policies; ensure regulatory tagging, provisioning guardrails (such as SCPs via AWS Control Tower), and integration of AWS security findings into operational workflows.
• Define, monitor, and maintain Service Level Indicators (SLIs) and Service Level Objectives (SLOs), leveraging AWS observability tooling (CloudWatch, X-Ray) and contributing to troubleshooting documentation, on-call best practices, and post-incident analysis.
• Design, implement, and maintain resilient networking across multi-VPC and multi-account environments, including ALB/NLB configuration, private/hybrid connectivity (Direct Connect, VPN), subnets, routing, security groups, and PrivateLink-enabled architectures, alongside comprehensive DNS management (Route 53).
• Support FinOps initiatives: right-size cloud resources, manage autoscaling, plan and track Savings Plans/Reserved Instances, monitor usage/budget anomalies, and maintain an up-to-date ServiceNow CMDB. Active participation in change management, incident management, and on-call rotations is expected.
• Engage in exploration and potential implementation of AI agents or automation (using AWS Bedrock, Lambda, Step Functions, Kendra/OpenSearch) to further optimize developer experience and operations.
• Assist in the wind-down and transition of legacy Azure workloads as necessary, including support and guidance for workload migration.

Essential Skills, Experience

• 3–5 years of recent, hands-on experience as a Cloud/Platform/DevOps Engineer focused in AWS, with a strong grasp of core AWS services (compute, networking, IAM, and storage).
• Strong proficiency with Terraform (including module development, state management, and CI pipeline integration).
• Demonstrated experience with Git/GitHub, and practical usage of GitHub Actions or similar continuous integration/deployment tools.
• Hands-on experience operating and supporting containerization (ECS/Fargate, EKS, Docker) and serverless architectures (Lambda, API Gateway), as well as working knowledge of managed databases (RDS/Aurora, DynamoDB, ElastiCache).
• Linux administration fundamentals and scripting skills (Bash and/or Python) for automation and operations support.
• Demonstrable skills in monitoring, observability, and troubleshooting cloud architectures using AWS CloudWatch (logs, metrics, alarms, tracing) and X-Ray.
• Solid understanding of AWS security best practices, including least-privilege IAM, key management (KMS), web application firewalls (WAF), and secure secret management.
• Familiarity with cost management practices in the cloud (FinOps), including tracking and optimizing resource usage, implementing autoscaling, and reporting on cost and budget anomalies.
• Experience with resilient cloud networking fundamentals, including VPC design, subnets, routing, security group/NACL configuration, and Direct Connect/VPN for hybrid architectures.
• Familiarity with Azure cloud (AKS, Key Vault, Firewall, Sentinel, Monitor) is a plus, particularly during the cloud transition phase.
• Exposure to supporting and/or implementing AI-driven DevOps automation and workflow enhancements is beneficial but not required.

Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline preferred; equivalent hands-on experience accepted.
• AWS certifications (Solutions Architect Associate, SysOps, or Developer) are highly preferred; AWS DevOps Pro/Security certification is a plus.
• Kubernetes certifications (CKA/CKAD) or Docker certifications are valued.
• Azure certifications, while not required, are considered a bonus for candidates assisting with transitional projects.

ECCO Select is committed to hiring and retaining a diverse workforce. Our policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Veterans of our United States Uniformed Services are specifically encouraged to apply for ECCO Select opportunities.

Equal Employment Opportunity is The Law

This Organization Participates in E-Verify