Note: The job is a remote job and is open to candidates in USA. Team Cymru is a cybersecurity and threat-intelligence organization focused on making the digital world safer. The Cloud Engineer will administer and grow the company’s multi-account AWS environment, managing infrastructure, identity, governance, networking, security, monitoring, and cost optimization while supporting on-premises private-cloud automation and participating in an on-call rotation.
Responsibilities
- Administer the AWS Organization, managing accounts, organizational units, and the multi-account structure day to day
- Administer IAM (users, roles, policies, least-privilege access) along with secrets and key management (Secrets Manager, KMS)
- Implement and maintain governance guardrails, including Service Control Policies (SCPs), Control Tower guidelines, and Account Factory provisioning, under senior guidance
- Design, deploy, and maintain infrastructure as code with CloudFormation, using version control, change sets, and drift detection, and take part in the CI/CD process for templates
- Administer networking and VPCs, including subnets, routing, security groups, and connectivity
- Manage billing and cost: budgets and alerts, cost-allocation tagging, and rightsizing/optimization recommendations
- Maintain resource tagging and governance standards that feed cost allocation and AWS Config rules
- Operate cloud observability, including CloudWatch metrics, logs, and alarms, and CloudTrail, and respond to alerts
- Maintain baseline cloud security services (GuardDuty, Security Hub, AWS Config) and respond to infrastructure-layer security findings in partnership with the Security team
- Support the on-premises private cloud through process-improvement automation, monitoring automation, and application integration, working closely with and learning from the SRE team
- Take part in a shared on-call rotation, responding to incidents and driving resolution
- Maintain documentation and runbooks
Skills
- ● AWS Certified Cloud Practitioner or an AWS Associate-level certification
- ● 1-3 years of hands-on AWS experience (junior to mid-level)
- ● Working knowledge of AWS Organizations, IAM, and multi-account concepts
- ● Experience with infrastructure as code, especially CloudFormation
- ● Familiarity with VPC networking (subnets, routing, security groups)
- ● Exposure to AWS cost management and governance (SCPs, tagging, budgets)
- ● Comfortable scripting in Bash and/or Python
- ● Willingness to learn on-prem virtualization and to join an on-call rotation
- ● AWS Certified Cloud Practitioner or AWS Associate-level certification required
- ● Minimal to occasional travel may be required depending on team needs
- ● Hands-on Control Tower and Account Factory experience (nice to have)
- ● CloudWatch/CloudTrail observability and baseline security services like GuardDuty, Security Hub, AWS Config (nice to have)
- ● Secrets Manager / KMS experience (nice to have)
- ● Git-based workflows and CI/CD for infrastructure as code (nice to have)
- ● Exposure to on-prem hypervisors (Xen, Proxmox) or Linux administration a plus
- ● Background in a security- or threat-intelligence-conscious environment a plus
Benefits
- Remote position
- Collaborative, mission-driven culture
- Opportunity to contribute to improving global security
- Opportunity to learn from the Site Reliability Engineering team and develop automation skills
Company Overview