
Cloud Infrastructure Engineer – AWS
Bright Vision Technologies · Cary, NC
Remote
About the job
Cloud Infrastructure Engineer – AWS – Remote
Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.
Job Title: Cloud Infrastructure Engineer – AWS
Location: 100% Remote (U.S.)
Position Type: Full-time, Direct W2
Salary Range: $100,000–$150,000 Annually
Experience Required: 6+ years
Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.
Job Summary
We are seeking an experienced Cloud Infrastructure Engineer – AWS to design, build, and operate large-scale, secure, and highly available cloud platforms on Amazon Web Services. This is a deeply hands-on engineering role spanning architecture, infrastructure-as-code, automation, security, observability, and continuous operational improvement of mission-critical production workloads. The successful candidate will bring strong working knowledge of the AWS service portfolio, deep DevOps fundamentals, and a pragmatic, cost-aware design mindset, and will partner with application, security, and SRE teams to deliver resilient, cloud-native solutions that scale with the business.
Key Responsibilities
Architect, deploy, and operate enterprise-grade AWS environments across compute, networking, storage, identity, and managed data services, with strong attention to scalability, reliability, and security
Author and maintain production-quality infrastructure-as-code using Terraform, AWS CloudFormation, or AWS CDK, with rigorous version control, peer review, and automated validation
Design multi-account AWS organizations, including landing zones, SCPs, centralized logging, and shared services, to support secure and scalable enterprise adoption
Build secure VPC topologies — including subnetting, route tables, transit gateways, VPN, and Direct Connect integrations — that meet enterprise connectivity and isolation requirements
Implement strong IAM strategies using roles, permission boundaries, SCPs, AWS SSO, and short-lived credentials to enforce least-privilege access across the organization
Design, deploy, and operate Amazon EKS clusters and other container platforms (ECS, Fargate), including auto-scaling, networking, and integration with service meshes and observability stacks
Operate AWS managed data and analytics services such as RDS, Aurora, DynamoDB, S3, Redshift, Glue, and Kinesis, optimizing each for the access patterns and SLAs of the workloads it supports
Build and maintain robust CI/CD pipelines using AWS CodePipeline, CodeBuild, Jenkins, GitHub Actions, or GitLab CI, enabling repeatable, audited deployments of both infrastructure and applications
Implement comprehensive observability using CloudWatch, X-Ray, AWS Distro for OpenTelemetry, Prometheus, Grafana, and third-party tooling, with well-designed dashboards, alerts, and SLOs
Drive ongoing cost optimization through right-sizing, savings plans, reserved instances, lifecycle policies, and architectural simplification, with measurable savings tracked over time
Implement disaster-recovery and business-continuity capabilities, including cross-region replication, automated backups, regular failover testing, and documented runbooks
Strengthen security posture using AWS Security Hub, GuardDuty, Macie, Inspector, Config, and CloudTrail, and lead remediation of findings in collaboration with security teams
Advise application development teams on AWS-native design patterns, anti-patterns, and the appropriate service choices for each problem domain
Develop automation scripts and operational tooling in Python, Bash, and Go to streamline routine work and accelerate incident response
Mentor junior engineers, lead architecture and design reviews, and contribute thought leadership to the broader cloud community within the organization
Required Qualifications
Bachelor’s degree in Computer Science, Engineering, or a related technical discipline
Five or more years of cloud engineering experience, with at least three years focused on AWS in production environments
Strong hands-on experience with AWS core services, including EC2, VPC, IAM, S3, RDS, Lambda, CloudFront, and CloudFormation
Production-grade experience with infrastructure-as-code tools such as Terraform, AWS CDK, or CloudFormation
Solid experience designing and operating Amazon EKS or ECS clusters at scale
Hands-on experience with CI/CD pipelines across infrastructure and application workloads
Strong scripting skills in Python and Bash, with familiarity in Go or PowerShell considered a plus
Deep understanding of cloud security, IAM, encryption, key management, and compliance requirements
Experience implementing observability, monitoring, and alerting in cloud-native environments
Strong troubleshooting, communication, and documentation skills
Preferred Qualifications
AWS Certified Solutions Architect – Professional or DevOps Engineer – Professional certification
Experience with multi-account AWS Organizations and centralized governance
Familiarity with service mesh, eBPF-based observability, and zero-trust networking
Exposure to FinOps practices and well-architected cost-optimization frameworks
Experience operating regulated workloads (HIPAA, PCI-DSS, SOC 2, FedRAMP)
How to Apply
Would you like to know more about this opportunity? For immediate consideration, please send your resume to jaya@bvteck.com or contact us at (908) 505-3545. Learn more about Bright Vision Technologies at www.bvteck.com.
Bright Vision Technologies is an Equal Opportunity Employer.
Equal Employment Opportunity (EEO) Statement
Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.
BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.
Powered by JazzHR
rKEoGoD1zK
Ready to apply?Apply now