Cloud Infrastructure Engineer

Responsibilities

• Provision R2 Agency B AWS environment end-to-end: VPC design (subnets, NACLs, security groups), IAM roles/policies, KMS encryption keys
• Deploy Lake Formation infrastructure for R2: data catalogs, LF permissions, cross-account resource sharing with Central Platform
• Set up CI/CD pipelines integrated with SHIP-HATS (Government Agency mandated toolchain) — GitLab CI → CodePipeline → automated deployment
• Configure networking for cross-agency connectivity: VPC peering / Transit Gateway to Central Platform, PrivateLink for service access
• Build monitoring stack: CloudWatch dashboards, CloudTrail audit logging, AWS Config rules for compliance drift detection
• Implement RBAC framework: Lake Formation fine-grained permissions, IAM boundary policies, tag-based access control (TBAC) for data zones
• Provision pre-production and integration testing environments mirroring production topology
• Security hard...