Job Title: AWS Cloud Engineer III Location: Remote (EST Hours) Job#: 3034307 Length: 6 months Pay Range: $69-$78 Job Description: Company Overview A major financial institution is seeking an experienced AWS Cloud Platform Engineer to support its enterprise AWS environment. The Cloud Engineering team is responsible for designing, operating, and securing the enterprise AWS cloud platform - managing 100+ AWS accounts, 250+ serverless functions, and a comprehensive infrastructure-as-code ecosystem that supports the institution's digital transformation and regulatory compliance objectives. Position Summary The AWS Cloud Engineering III role is a hands-on technical position focused on day-to-day cloud platform operations including AWS account lifecycle management, infrastructure provisioning, VPC networking, security controls enforcement, and operational support. The ideal candidate is a seasoned cloud engineer who thrives in a regulated enterprise environment and can independently execute complex infrastructure tasks while adhering to strict change management and compliance requirements. Duties and Responsibilities Infrastructure Operations & Account Lifecycle - Provision and manage AWS accounts, services, and decommissioning within AWS Organizations - Perform VPC provisioning, upgrades, and configuration management using Terraform - Manage Transit Gateway attachments, route table configurations, and cross-account network connectivity - Support compute infrastructure including EC2 fleet management, Auto Scaling Groups, and load balancer configurations - Fulfill infrastructure change requests through ITSM processes and formal change management Infrastructure as Code (IaC) - Develop, maintain, and troubleshoot Terraform configurations for AWS infrastructure provisioning - Work within Terraform Cloud workspaces with policy-as-code enforcement - Leverage and contribute to internal Terraform modules, guardrails and standardized workflows Security & Compliance - Implement and maintain Service Control Policies (SCPs), IAM policies and least privilege access models - Enforce encryption and data protection standards (EBS, RDS, S3, KMS) - Triage and remediate findings from cloud security posture management (CSPM) tools, vulnerability scans, and drift detection - Manage VPC endpoint configurations, PrivateLink connectivity, and network security controls Monitoring, Cost Management & Operational Support - Monitor and respond to alarms, security findings, and AWS Config rule violations - Support FinOps practices including cost/budget monitoring and enforcement, and resource optimization recommendations - Participate in on-call rotation for cloud platform support - Collaborate with application teams, security, and enterprise architecture stakeholders Documentation & Knowledge Management - Maintain operational runbooks, SOPs, and technical documentation - Document infrastructure decisions, configurations, troubleshooting procedures, and customer support guides Minimum Knowledge, Skills, and Abilities Required Required Experience (Must-Haves) - 5 - 10 years of hands-on experience in cloud infrastructure engineering (AWS-focused) - Demonstrated experience with Terraform (HCL) and IaC lifecycle management - Deep working knowledge of AWS core services: VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, ELB (ALB/NLB), Transit Gateway - Experience operating multi-account AWS environments using AWS Organizations and SCPs - Proficiency in IAM policy design, cross-account access patterns, and least-privilege principles - Experience with CI/CD pipelines (Terraform Cloud, Jenkins, GitHub Actions, or equivalent) - Experience with Git-based workflows (branching strategies, pull requests, code reviews) in GitHub Enterprise or similar - Experience working in regulated or enterprise environments with formal change management (ServiceNow or equivalent ITSM) - Strong troubleshooting and problem-solving skills for complex, multi-account AWS environments - Excellent written and verbal communication skills; ability to produce clear technical documentation EEO Employer Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178. Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico. Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details. Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide. Employee Type: Contract Remote: Yes Location: Virtual, MI, US Job Type: Infrastructure and Security Pay Range: $69 - $78 per hour

• Design, deploy, and operate AWS infrastructure across multiple accounts and environments • Build and maintain Infrastructure as Code — Terraform modules, pipelines, drift detection • Own identity and access: SSO integration, Keycloak realms, IdP federation, RBAC • Operate HashiCorp Vault for secrets management — policies, auth methods, dynamic credentials, rotation • Build and maintain the observability stack — Prometheus, Grafana, dashboards, alerting • Implement landing zones, account vending, networking, and guardrails • Partner with security and SRE on compliance, hardening, and incident response • Automate operational work — provisioning, access reviews, certificate and secret rotation • Document architecture, runbooks, and onboarding guides • Participate in on-call rotation for platform services

• The Cloud Platform Engineer is the technical owner of the cloud landing zone estate and the workload subscriptions and accounts that sit on top of it. • The role builds, maintains, and evolves the Infrastructure as Code that provisions every shared platform service, every governance control, and every workload landing zone across the global cloud footprint. • This role sits at the foundation of the global transformation programme. • Move away from manual portal builds and route all change through the repository, the pipeline, and the policy engine. • Operate Azure as the strategic primary platform, while also covering AWS as the secondary platform where workloads remain or where workload teams have selected AWS for technical reasons. • Support workload onboarding including Kubernetes hosted machine learning and optimization platforms with Cosmos DB, Azure Files, Azure Blob Storage, and Application Gateway integration.

Role Description We are seeking an experienced Oracle Cloud Infrastructure (OCI) Engineer to architect, deploy, and operate large-scale, secure, and resilient cloud environments on Oracle’s next-generation public cloud. In this role you will own the full OCI engineering lifecycle, from landing-zone design and infrastructure-as-code, through workload migration and ongoing operations, including cost optimization and observability. The ideal candidate will combine deep technical knowledge of OCI services with strong DevOps and automation fundamentals, and will partner with database, application, and security teams to deliver well-engineered cloud platforms that support mission-critical Oracle and non-Oracle workloads. Key Responsibilities - Architect, deploy, and operate enterprise-grade OCI landing zones, compartments, and tenancy structures aligned with internal governance and compliance standards. - Design and implement OCI networking topologies, including VCNs, subnets, gateways, FastConnect, IPSec VPN, and DRG-based hub-and-spoke architectures. - Build and maintain OCI infrastructure-as-code using Terraform and OCI Resource Manager, with version control, peer review, and automated validation. - Implement IAM policies, federation with corporate identity providers, and strong RBAC patterns using OCI Identity Domains. - Design and operate OCI compute (VMs, bare-metal, OKE for Kubernetes) and storage services (Object, Block, File, Archive) optimized for workload patterns. - Operate OCI database services, including Autonomous Database, Exadata Cloud, MySQL HeatWave, and Base Database, in close partnership with DBA teams. - Build CI/CD pipelines on OCI DevOps service or external platforms (Jenkins, GitHub Actions) for both infrastructure and applications. - Implement observability using OCI Monitoring, Logging, APM, and integrations with third-party observability stacks. - Drive ongoing cost optimization through right-sizing, lifecycle management, and architectural simplification. - Design disaster-recovery and business-continuity solutions across OCI regions and availability domains. - Strengthen security posture using OCI Cloud Guard, Security Zones, Vault, and Data Safe, and lead remediation of findings. - Advise application development teams on OCI-native design patterns and best practices. - Develop automation tooling in Python, Bash, and Terraform to reduce operational toil. - Mentor junior engineers and contribute to internal cloud communities of practice. Qualifications - Bachelor’s degree in Computer Science, Engineering, or a related technical discipline. - Five or more years of cloud engineering experience, with strong hands-on time on OCI. - Production-level experience with infrastructure-as-code using Terraform. - Solid experience with OCI compute, networking, storage, identity, and database services. - Hands-on experience with Oracle Container Engine for Kubernetes (OKE). - Experience with CI/CD pipelines for cloud workloads. - Strong scripting skills in Python and Bash. - Deep understanding of cloud security, IAM, and compliance requirements. - Experience with observability tooling and incident response. - Excellent troubleshooting, communication, and documentation skills. Preferred Qualifications - Oracle Cloud Infrastructure Architect Professional certification. - Experience operating Oracle Exadata Cloud or Autonomous Database at scale. - Exposure to multi-cloud architectures spanning OCI and AWS/Azure/GCP. - Familiarity with FinOps practices on OCI. - Experience operating regulated workloads on OCI. How to Apply Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] or contact us at (908) 505-3544. Learn more about Bright Vision Technologies at www.bvteck.com .