Senior Software Engineer - Cloud

A Senior Software Engineer on the Cloud Account Management (CAM) team is a security-focused cloud engineer responsible for designing, building, and supporting automation and tooling initiatives that further enable secure, compliant, self-service ways of working for both the team and the developer base. This position will report to the engineering manager and will interact with other software engineers in the Cloud Account Management (CAM) team.

Responsibilities:

• Champion and execute best practices and security standards for operating in the cloud.
• Troubleshoot and implement granular, least-privilege IAM permissions for user access and workloads running in multi-tenant AWS accounts.
• Understand user access into AWS workloads and troubleshoot issues with SSH and SSM as access methods.
• Provision, monitor, renew, and own SSL certificates across all of our AWS accounts.
• Provide guidance and recommendations to development teams on service design and deployments.
• Own initiatives and contribute to future solution designs and planning.
• Be a go-to technical resource on the team, spanning across levels and cross-functional teams.
• Monitor and work on inbound issues reported via Jira, email, and MS Teams.

Requirements:

• 5+ years of AWS experience.
• 3+ years of hands-on AWS Security/IAM administration and policy-creation experience for many users and workloads where least privilege is key.
• 3+ years of experience with deployment and CI/CD toolsTerraform, GitHub Actions, Spinnaker, and Jenkins are a plus.
• 3+ years of relevant software engineering experience, primarily backend (Python, database, building APIs).
• Experience with Unix/Linux systems.
• You're practical and personable, with a succinct communication style and the ability to communicate with engineers.
• Familiarity with operational troubleshooting tools and techniques.

Preferred Qualifications:

• AWS Certifications.
• 2+ years of experience supporting DevOps teams in mid-to-large-sized organizations, especially in multitenant environments.
• Familiarity with SSL certificate management.
• Familiarity with general and AWS-specific networking concepts, including VPC constructs, firewalling, complex routing, and DNS.