Senior Software Engineer, AWS Cloud Infrastructure
Praxisprecisionmedicines · United States - Remote
About this role
**Senior Software Engineer, AWS Cloud Infrastructure** **Location**: Remote possible, with flexibility to travel as needed. --- ## The Opportunity Own and shape how Praxis designs, governs, secures, and operates AWS at scale—from account structure and identity to the platforms and applications that run on them. You’ll be a hands-on builder across software engineering, cloud infrastructure, security, and operations, primarily using **TypeScript** and **Python**. You’ll also take direct accountability for production operations, including **on-call**. You’ll drive problems through resolution, move quickly with incremental and well-controlled changes, and turn operational learnings into durable improvements. You’ll also raise the bar for the people and systems around you through clear communication, mentorship, and shared engineering practices. --- ## Primary Responsibilities - Own and evolve AWS architecture for enterprise workloads, including multi-account foundations, landing zone / Control Tower patterns, networking, security baselines, and shared platforms. - Establish and continuously improve AWS governance (organizational structure, SCPs, tagging, cost controls, compliance, audit readiness, and operational standards). - Design and operate identity and access across AWS (IAM, IAM Identity Center, and Microsoft Entra ID integrations for SSO, federation, role mapping, access reviews, and least-privilege access). - Build, harden, and operate AWS platforms and full-stack services using TypeScript and Python (compute, containers, serverless, data stores, messaging, and cloud automation). - Drive operational excellence: monitoring, alerting, dashboards, SLOs/SLIs, runbooks, incident response, and durable fixes; participate in on-call and own incidents through resolution and learning. - Automate infrastructure and delivery with Infrastructure as Code (preferably **Pulumi** and/or **SST**) and CI/CD (Bitbucket Pipelines and/or GitHub Actions) with safe, incremental delivery and low blast radius. - Partner with engineering and IT to translate needs into secure, maintainable solutions; improve production readiness and operational practices; mentor engineers. --- ## Qualifications - Senior-level software engineering experience with substantial hands-on production AWS experience. - Strong full-stack engineering capability in **TypeScript** and **Python** (APIs, services, tooling, cloud automation). - Deep enterprise AWS experience including **IAM, Organizations, VPC, EC2, ECS/EKS or Lambda, S3, RDS/DynamoDB, CloudWatch, KMS, Config, and GuardDuty**. - Proven ability to design and operate AWS governance at scale (multi-account strategy, policy guardrails, access control, security standards, operational controls). - Strong AWS networking fundamentals (VPNs, peering, Transit Gateway, routing, DNS, hybrid connectivity). - Enterprise SSO experience strongly preferred: **Microsoft Entra ID (Azure AD) federation into AWS** (SAML/OIDC, IAM Identity Center, application/role mapping, access lifecycle). - Experience in regulated/audit-ready environments with strong change control, evidence/traceability, least privilege, and durable controls. - Demonstrated operational ownership: meaningful alerts/monitors, reduced noise, improved reliability, incident response, and engineering improvements. - Strong Infrastructure as Code experience (**Pulumi** and/or **SST** preferred; Terraform or AWS CDK transferable). - Experience with **Bitbucket Pipelines** an
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.