{"id":3977673,"url":"https://alion.io/job/svitla-systems-senior-aws-cloud-and-platform-engineer","title":"Senior AWS Cloud and Platform Engineer","company":{"id":2216,"name":"Svitla Systems","domain":"svitla.com","url":"https://alion.io/company/svitla-systems","size_band":null,"is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":80,"open_postings":10,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-11-09T06:03:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"unspecified","remote_scope_basis":null,"remote_working_hours":{"label":"PT","utc_offset_min":-8,"utc_offset_max":-8},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon EventBridge","optional":false},{"name":"Amazon S3","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS CDK","optional":false},{"name":"AWS Fargate","optional":false},{"name":"AWS Lambda","optional":false},{"name":"AWS Step Functions","optional":false},{"name":"Azure","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"Langfuse","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"Playwright","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-11-09T13:32:38Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T18:41:18Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Svitla Systems Inc. is looking for a Senior AWS Cloud and Platform Engineer for a full-time position (40 hours per week) on a short-term basis (16 weeks) in LATAM. Our client is a food industry company located in Seattle, Washington, that runs its daily operations from its own on-premises data center, which is its primary infrastructure. Its core systems run on VMware there, including Microsoft Dynamics GP on SQL Server and a warehouse management system. Orders also arrive through a third-party ordering platform with no API, and retail partners trade through EDI. Staff work on virtual desktops and sign in through Okta. The company already runs its disaster recovery environment on AWS, keeps some services on Azure, and uses Microsoft 365.\nYou own the AWS platform the pod’s agents run on: accounts and environments, identity and access, infrastructure as code, deployment pipelines, secrets, private links to the on-premises data center, monitoring, audit logging, and cost. You build this foundation in the first workflow and reuse it for each one after, so every new workflow costs less to deliver.\nYou will be one of three people who stay with the pod throughout. You will schedule your work, releases, and access requests with the Outcome Lead, Svitla’s delivery manager for the pod. The Forward Deployed Technical Lead owns the architecture, and specialists in agents and MCP, data, integration, and document AI join as each workflow needs them. You will also be the pod’s link to our client’s IT and security team, and you will get their sign-off before anything reaches production.\nRequirements\n5+ years of hands-on production experience with AWS.\nExperience with AWS Organizations or Control Tower, service control policies, and IAM Identity Center.\nExperience with IAM roles, permission boundaries, and short-lived credentials for people, services, and agents.\nExperience with VPC design with private subnets, endpoints, and PrivateLink, plus site-to-site VPN to on-premises.\nExperience with ECS on Fargate or EKS, Lambda, API Gateway, Step Functions, SQS, and EventBridge.\nExperience with Amazon Bedrock: model access, guardrails, private endpoints, invocation logging, and quotas.\nExperience with S3, Secrets Manager, KMS, CloudWatch, CloudTrail, AWS Config, and Security Hub.\nExperience with cost control using tagging, Cost Explorer, budgets, and anomaly alerts.\nExperience with Terraform (preferred) or AWS CDK, including modules, remote state, and code review.\nExperience with CI/CD (GitHub Actions, GitLab CI, or AWS CodePipeline), including automated tests, approvals, and rollback.\nExperience with policy as code and security scanning in the pipeline (for example, OPA, Checkov, or tfsec).\nExperience with Docker, Python, and Bash, plus PowerShell for the Windows side.\nExperience running LLM applications or agents in production, not only prototypes.\nExperience hosting MCP servers and tool APIs with authentication, rate limits, and a log of every call.\nExperience with approval gates and rollback paths for agents that change records.\nExperience tracing each agent step: errors, latency, tokens, and cost (for example, OpenTelemetry or Langfuse).\nExperience with evaluation sets in the pipeline, with thresholds that can block a release.\nExperience with isolated sandboxes for browser automation (for example, Playwright) against web applications with no API.\nExperience with defenses against prompt injection and data leaks: scoped tools, egress controls, and output checks.\nExperience integrating Okta with AWS IAM Identity Center through SAML, with SCIM provisioning.\nExperience with Active Directory and Microsoft Entra ID: groups, service accounts, and hybrid identity.\nExperience providing read-only access to SQL Server replicas and reporting databases without adding load to production.\nExperience with SFTP file exchange with partners and vendors using key pairs and IP allow-lists, never shared passwords.\nFluent English, with the ability to explain data flows and risks in plain language to a careful security team.\nAbility to write runbooks that the client’s IT team can follow at 2 a.m., and architecture decision records.\nWorking from a time zone ahead of US Pacific Time, with at least 4 hours of overlap with Pacific business hours.\nAvailability for planned evening or weekend releases, and for travel to Seattle when the client asks.\nWill be a plus\nAWS Professional or Specialty certification (DevOps Engineer, Security, or Advanced Networking).\nExperience with document AI on AWS, such as Amazon Textract or Bedrock Data Automation.\nWorking knowledge of Azure and Microsoft 365, which the client also uses.\nExperience with Microsoft Dynamics GP or SQL Server data, and EDI file exchange (SPS Commerce, AS2, SFTP).\nExperience in the food industry or other 24/7 operations.\nResponsibilities\nAgree the access path and control baseline with the client’s IT and security team (Okta, virtual desktops, and AWS accounts), then build the environments, pipeline, and secrets management as code.\nBuild private, encrypted links from AWS to the on-premises data center, so that agents reach data through read-only replicas, the reporting database, and queues, never through production systems.\nConnect Okta to AWS, give people and agents separate identities, enforce data access in the platform rather than in prompts, and keep every service and agent on least privilege.\nHost agent services, MCP servers, Amazon Bedrock model access, and a document extraction service that keeps every document in the client’s accounts, with approval gates and rollback for agents that act.\nRun browser automation for the ordering platform in an isolated sandbox, with synthetic checks and alerts.\nLog every agent step to an audit trail, alert users and the pod when a check fails, and report AWS and model cost per workflow each month.\nDeploy every change through the pipeline, never by hand in the console, with releases gated on each workflow’s test set and evaluation thresholds.\nPrepare the runbook and the evidence pack that the client’s security team reviews before go-live.\nSupport each workflow after go-live until it runs without intervention.\nTrain the client’s IT team to run and extend the platform.","description_format":"text","description_chars":6232,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-09T18:41:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":43,"reasons":["conf:1","win:early"],"computed_at":"2026-11-09T20:40:29Z"},"pay":null,"html_url":"https://alion.io/job/svitla-systems-senior-aws-cloud-and-platform-engineer","json_url":"https://alion.io/job/svitla-systems-senior-aws-cloud-and-platform-engineer.json","meta":{"generated_at":"2026-11-09T20:40:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8077,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2216},"rest":"https://alion.io/mcp/rest/get_company?id=2216"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsvitla-systems-senior-aws-cloud-and-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsvitla-systems-senior-aws-cloud-and-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsvitla-systems-senior-aws-cloud-and-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/svitla-systems-senior-aws-cloud-and-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsvitla-systems-senior-aws-cloud-and-platform-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3977673}},{"tool":"search_jobs","arguments":{"company":"svitla.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3977673},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}