AWS Cloud Engineer

Quick Facts

• Role: AWS Cloud Engineer

• Focus: AWS multi-account platform, security governance, and organization-level networking

Description

You will be responsible for designing and developing an AWS platform with multi-account architecture. The role includes defining and enforcing security standards (e.g., Service Control Policies) and building an AWS Landing Zone using Infrastructure-as-Code and Policy-as-Code. You will also design organization-level network architecture (VPC segmentation, multi-account connectivity, and integration with the corporate network) and proactively look for improvements.

Responsibilities

• Co-own the AWS platform: design and develop multi-account architecture

• Define and enforce security standards (e.g., Service Control Policies)

• Create and maintain AWS Landing Zone

• Use Infrastructure-as-Code and Policy-as-Code approaches

• Design organizational network architecture (VPC segmentation, multi-account linking, integration with corporate network)

• Identify opportunities to improve and optimize solutions

Requirements

• Experience operating AWS in a production environment

• Strong understanding of IAM (roles, policies, least privilege)

• Practical experience with Infrastructure-as-Code (e.g., Terraform or AWS CDK)

• Ability to evaluate solutions and balance speed, security, and compliance

• Professional English communication for a work environment

• Willingness to actively design and evolve platforms

Benefits

• Flexible working hours and home office option

• Modern offices near the city center (Brno) and supportive team environment

• Meal allowance (meal vouchers)

• 25 days of vacation plus 1 additional day for every 2 years worked, up to 30 days

• Workation or sabbatical options

• Cafeteria benefits (e.g., sports passes, education, internet contribution, pension)

• Indefinite contract

• Interest-free company loan

• Possibility to rent a company car

• Optional online English and German training during working hours