Cloud Infrastructure Engineer

Provision R2 Agency B AWS environment end-to-end: VPC design (subnets, NACLs, security groups), IAM roles/policies, KMS encryption keys

• Deploy Lake Formation infrastructure for R2: data catalogs, LF permissions, cross-account resource sharing with Central Platform

• Set up CI/CD pipelines integrated with SHIP-HATS (Government Agency mandated toolchain) — GitLab CI → CodePipeline → automated deployment

• Configure networking for cross-agency connectivity: VPC peering / Transit Gateway to Central Platform, PrivateLink for service access

• Build monitoring stack: CloudWatch dashboards, CloudTrail audit logging, AWS Config rules for compliance drift detection

• Implement RBAC framework: Lake Formation fine-grained permissions, IAM boundary policies, tag-based access control (TBAC) for data zones

• Provision pre-production and integration testing environments mirroring production topology

• Security hardening: encryption at rest (KMS CMK) and in transit (TLS), S3 bucket policies, VPC endpoints for all AWS service access

• Support Inho (Tech Lead) on cross-release infrastructure patterns

• Infrastructure documentation: architecture diagrams (

draw.io/Lucidchart

), runbooks, IaC code repo with PR review process

• Participate in daily stand-ups, sprint demos, and infrastructure design reviews
Required skills: VPC, IAM, CloudFormation/CDK/Terraform, CI/CD (CodePipeline/GitLab CI), networking, Linux admin, security (SCPs, encryption)