Note: The job is a remote job and is open to candidates in USA. New Era Technology is a global company committed to creating a supportive workplace that values growth and development. They are seeking a Senior AWS Platform Engineer to design, automate, and operate secure self-service AWS platform capabilities for development teams, focusing on governance, automation, and developer enablement.
Responsibilities
- Design, build, and operate organizational units and account-vending automation so standard cloud environment requests can be fulfilled without manual cloud-engineering work
- Implement organization-level guardrails, including SCPs that block unacceptable actions, enforce region restrictions, and enable required logging and security services by default during account creation
- Build and enforce per-account cost controls, including budgets, actual and forecasted spend alerts, and automated remediation paths such as notification, access restriction, quarantine, and cleanup
- Ensure each account or environment is isolated by account, organizational unit, and network boundary from controlled environments and corporate networks, with no default transitive trust
- Partner with the identity team to design federated access patterns and short-lived role assumption models that eliminate the need for long-lived IAM users
- Own and maintain the Terraform, CloudFormation, and CDK module/template library that developers use for EKS, databases, queues, serverless services, and other common application patterns
- Build and maintain delivery pipelines that promote validated infrastructure and application changes through Git review, automated validation, and environment-scoped deployment roles
- Prevent direct console changes in staging and production by enforcing approved pipeline-based promotion and deployment workflows
- Instrument centralized logging and audit trails from the first day of each account’s lifecycle, including account creation records, API audit trails, and security findings
- Define and automate lifecycle policies for account and environment expiration, extension, decommissioning, and cleanup in a governed multi-team operating model
Skills
- Hands-on experience with AWS Control Tower, AWS Organizations, and multi-account landing zone design
- Deep hands-on experience implementing Infrastructure as Code using Terraform and AWS CloudFormation, including reusable modules/templates, parameterization, versioning, validation, state management, and promotion through CI/CD pipelines
- Experience with federated identity using SSO, SAML, or OIDC, and short-lived credential models such as IAM Identity Center and STS role assumption
- Working knowledge of SCPs and AWS guardrail design, with the ability to restrict high-risk actions while preserving developer velocity
- Experience with EKS, RDS or Aurora, Redshift, SQS, SNS, serverless services, or similar managed AWS services at a level needed to build safe self-service templates
- CI/CD pipeline experience supporting Git-based review and promotion workflows across development, staging, production, and other controlled environments
- Familiarity with AWS cost management tooling such as Budgets and Cost Explorer, including spend-based alerting and automated remediation patterns
- Familiarity with CloudTrail, AWS Config, Security Hub, or equivalent centralized logging, security, and audit tooling
- Experience with Account Factory for Terraform and GitOps-based AWS account provisioning
- Experience integrating ServiceNow or a similar ITSM platform as an automated trigger for infrastructure provisioning rather than a manual request queue
- Experience with developer portal tooling such as Backstage
- Background building account-vending, self-service cloud provisioning, or platform-engineering capabilities for large, multi-team engineering organizations
- Experience implementing automated account lifecycle policies, including time-boxed access, expiration notifications, extension approvals, and decommissioning workflows
Benefits
- Work alongside industry-certified experts
- Access continuous training
- Enjoy competitive benefits
- Remote
Company Overview
Company H1B Sponsorship