Senior AWS Infrastructure Engineer - (IaC), CDK,IAM security
- Toronto, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Role: Senior AWS Infrastructure Engineer - (IaC), CDK,IAM security
Location: Toronto
Hybrid
Contract
Domain: Banking / Financial Services
Key Requirements:
- Strong hands-on experience designing and managing enterprise AWS multi-account environments using AWS Organizations, Control Tower, and SCPs.
- Expert knowledge of IAM, permission boundaries, cross-account access, trust policies, and least-privilege security.
- Strong AWS networking skills: VPC, Transit Gateway, PrivateLink, VPC endpoints, Route 53, and load balancers.
- Hands-on experience with EC2, EKS/ECS, ECR, Lambda, S3, SQS, KMS, Secrets Manager, and CloudWatch.
- Strong Infrastructure as Code (IaC) experience with AWS CDK (preferred), Terraform, or CloudFormation.
- Experience with Python/shell scripting, CI/CD automation, monitoring, and troubleshooting complex infrastructure issues.
Ideal Candidate: A senior, hands-on engineer with proven enterprise AWS infrastructure experience, particularly in IAM security, cross-account permissions, networking, and production troubleshooting. Banking/Financial Services experience is preferred.
More about this job
Responsibilities
Design and manage enterprise AWS multi-account infrastructure, including account governance, IAM security, cross-account permissions, and networking. Build infrastructure as code and support automation, monitoring, and troubleshooting of complex production environments.
Requirements
Requires senior-level, hands-on experience with enterprise AWS infrastructure, especially IAM security, cross-account access, and AWS networking. Candidates should have IaC experience with AWS CDK, Terraform, or CloudFormation, along with scripting, CI/CD, monitoring, and troubleshooting skills; banking or financial services experience is preferred.
Skills
- AWS Organizations
- AWS Control Tower
- Service Control Policies
- IAM Security
- Permission Boundaries
- Cross-Account Access
- AWS Networking
- VPC
- Transit Gateway
- PrivateLink
- AWS CDK
- Terraform
- CloudFormation
- Python
- CI/CD Automation
- Infrastructure Troubleshooting
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Engineering
- Security & Safety
- Finance & Accounting
Keywords
- AWS
- AWS Organizations
- AWS Control Tower
- Service Control Policies
- IAM
- Permission Boundaries
- Cross-Account Access
- Trust Policies
- Least Privilege
- VPC
- Transit Gateway
- PrivateLink
- VPC Endpoints
- Route 53
- Load Balancers
- EC2
- EKS
- ECS
- ECR
- Lambda
- S3
- SQS
- KMS
- Secrets Manager
- CloudWatch
- AWS CDK
- Terraform
- CloudFormation
- Python
- CI/CD