Cloud Engineer – AWS Foundation Platform

Job summary

Ste*** is seeking a skilled and motivated Cloud Engineer to reinforce and support the design, implementation, and continuous improvement of our AWS Foundation Product — an AWS Landing Zone governing 1,500+ AWS accounts distributed across all Ste*** business functions and geographies (NAFTA, LATAM, Europe, EMEA, and APAC).

Qualifications

• Bachelor's degree in computer science, Information Technology, or related field.
• Minimum 5 years of experience designing, deploying, and managing AWS cloud environments at enterprise scale in multi-account contexts.
• Expertise in AWS multi-account services: AWS Control Tower, Organizations, Service Control Policies, and Landing Zone design patterns.
• Expert-level Terraform and/or AWS CDK for Infrastructure as Code; GitOps delivery pipelines with drift detection and policy gates (GitHub Actions, GitLab CI…).
• Proficiency in Python and/or Typescripts for building platform tooling, internal CLIs, automation services, and event-driven workflows (Lambda, Step Functions, EventBridge…).
• Daily use of AI coding assistants (GitHub Copilot, Claude Code, Codex …) with demonstrated ability to review, validate, and own AI-generated code at production quality.
• Solid understanding of DevOps and SRE practices: DORA metrics, SLOs, error budgets, incident management, policy-as-code, and blameless post-mortem culture.
• Strong knowledge of AWS networking: Transit Gateway, VPC design, Route 53, Direct Connect, and PrivateLink.
• Experience with AWS security services: Security Hub, GuardDuty, Config Rules, IAM design, and automated compliance remediation.
• AWS Certifications preferred: DevOps Engineer Professional, Solutions Architect Professional, or Security Specialty.
• Familiarity with AIOps and AI/ML platform services (Amazon Bedrock, SageMaker, Amazon Q Business, DevOps Guru) is a strong plus.

Responsibilities

• Own Infrastructure as Code (IaC) delivery pipelines across 1,500+ accounts using Terraform, enforcing GitOps practices, policy-as-code, drift detection, and automated testing at every stage.
• Manage AWS Control Tower, Organizations, and Service Control Policies (SCPs), enforcing governance, least-privilege IAM, and compliance guardrails with automated self-healing when drift is detected.
• Apply AI

Certifications

Degrees

Industry

Company size

Contract length