Cloud Infrastructure Engineer - AWS

Cloud Infrastructure Engineer – AWS – Remote

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: Cloud Infrastructure Engineer – AWS
Location: 100% Remote (U.S.)
Position Type: Full-time, Direct W2
Salary Range: $100,000–$150,000 Annually
Experience Required: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary
We are seeking an experienced Cloud Infrastructure Engineer – AWS to design, build, and operate large-scale, secure, and highly available cloud platforms on Amazon Web Services. This is a deeply hands-on engineering role spanning architecture, infrastructure-as-code, automation, security, observability, and continuous operational improvement of mission-critical production workloads. The successful candidate will bring strong working knowledge of the AWS service portfolio, deep DevOps fundamentals, and a pragmatic, cost-aware design mindset, and will partner with application, security, and SRE teams to deliver resilient, cloud-native solutions that scale with the business.

Key Responsibilities

• Architect, deploy, and operate enterprise-grade AWS environments across compute, networking, storage, identity, and managed data services, with strong attention to scalability, reliability, and security.
• Author and maintain production-quality infrastructure-as-code using Terraform, AWS CloudFormation, or AWS CDK, with rigorous version control, peer review, and automated validation.
• Design multi-account AWS organizations, including landing zones, SCPs, centralized logging, and shared services, to support secure and scalable enterprise adoption.
• Build secure VPC topologies — including subnetting, route tables, transit gateways, VPN, and Direct Connect integrations — that meet enterprise connectivity and isolation requirements.
• Implement strong IAM strategies using roles, permission boundaries, SCPs, AWS SSO, and short-lived credentials to enforce least-privilege access across the organization.
• Design, deploy, and operate Amazon EKS clusters and other container platforms (ECS, Fargate), including auto-scaling, networking, and integration with service meshes and observability stacks.
• Operate AWS managed data and analytics services such as RDS, Aurora, DynamoDB, S3, Redshift, Glue, and Kinesis, optimizing each for the access patterns and SLAs of the workloads it supports.
• Build and maintain robust CI/CD pipelines using AWS CodePipeline, CodeBuild, Jenkins, GitHub Actions, or GitLab CI, enabling repeatable, audited deployments of both infrastructure and applications.
• Implement comprehensive observability using CloudWatch, X-Ray, AWS Distro for OpenTelemetry, Prometheus, Grafana, and third-party tooling, with well-designed dashboards, alerts, and SLOs.
• Drive ongoing cost optimization through right-sizing, savings plans, reserved instances, lifecycle policies, and architectural simplification, with measurable savings tracked over time.
• Implement disaster-recovery and business-continuity capabilities, including cross-region replication, automated backups, regular failover testing, and documented runbooks.
• Strengthen security posture using AWS Security Hub, GuardDuty, Macie, Inspector, Config, and CloudTrail, and lead remediation of findings in collaboration with security teams.
• Advise application development teams on AWS-native design patterns, anti-patterns, and the appropriate service choices for each problem domain.
• Develop automation scripts and operational tooling in Python, Bash, and Go to streamline routine work and accelerate incident response.
• Mentor junior engineers, lead architecture and design reviews, and contribute thought leadership to the broader cloud community within the organization.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
• Five or more years of cloud engineering experience, with at least three years focused on AWS in production environments.
• Strong hands-on experience with AWS core services, including EC2, VPC, IAM, S3, RDS, Lambda, CloudFront, and CloudFormation.
• Production-grade experience with infrastructure-as-code tools such as Terraform, AWS CDK, or CloudFormation.
• Solid experience designing and operating Amazon EKS or ECS clusters at scale.
• Hands-on experience with CI/CD pipelines across infrastructure and application workloads.
• Strong scripting skills in Python and Bash, with familiarity in Go or PowerShell considered a plus.
• Deep understanding of cloud security, IAM, encryption, key management, and compliance requirements.
• Experience implementing observability, monitoring, and alerting in cloud-native environments.
• Strong troubleshooting, communication, and documentation skills.

Preferred Qualifications

• AWS Certified Solutions Architect – Professional or DevOps Engineer – Professional certification.
• Experience with multi-account AWS Organizations and centralized governance.
• Familiarity with service mesh, eBPF-based observability, and zero-trust networking.
• Exposure to FinOps practices and well-architected cost-optimization frameworks.
• Experience operating regulated workloads (HIPAA, PCI-DSS, SOC 2, FedRAMP).

How to Apply
Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] or contact us at (908) 505-3545. Learn more about Bright Vision Technologies at
Bright Vision Technologies is an Equal Opportunity Employer.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.