Cloud Engineer – Contract

• Assess current infrastructure, configuration, manual processes, and risks; produce a prioritized written assessment
• Define and implement target infrastructure across managed PaaS platforms and AWS services with dev, staging, and production separation
• Define reproducible infrastructure as code using Terraform, CloudFormation, CDK, or Pulumi
• Implement IAM roles, least-privilege access, secrets management, VPC, security groups, and TLS
• Provision and tune RDS databases, configure backups, point-in-time recovery, encryption, and documented restore testing
• Configure secure S3 buckets, lifecycle rules, versioning, encryption, access policies, and CDN delivery
• Build and deploy Lambda functions with appropriate triggers, concurrency limits, timeouts, retries, dead-letter queues, idempotency, and alerting
• Configure authenticated transactional email through SES, SendGrid, Postmark, or other SMTP services
• Manage email sending reputation, warmup, dedicated IPs, bounce, complaint, suppression, and deliverability monitoring
• Build CI/CD pipelines that test, lint, build, deploy, promote environments, run migrations, and support documented one-step rollback
• Set up centralized logging, metrics, alerting, health indicators, on-call runbooks, security reviews, cost visibility, tagging, and waste reduction
• Deliver infrastructure assessment, architecture diagram, infrastructure-as-code repository, hardened cloud environments, monitoring, cost baseline, documentation, access inventory, limitations, next steps, and team handoff

• 3+ years of engineering experience
• Production experience running applications on a managed PaaS platform
• Experience with AWS RDS provisioning, tuning, backup and recovery, and diagnosing database-related application slowness
• Experience with AWS S3 bucket policies, lifecycle management, encryption, and secure handling of user-uploaded content
• Experience building, deploying, and operating AWS Lambda functions, including failure handling
• Experience configuring transactional email and SMTP services, including SPF, DKIM, DMARC, and deliverability management
• Experience building and maintaining reliable CI/CD pipelines
• Infrastructure-as-code experience with Terraform, CloudFormation, CDK, or Pulumi
• Experience with containers and orchestration where applicable
• Experience with HIPAA, PCI, or SOC 2 compliance in a cloud environment is advantageous
• Domain experience in medical software and/or e-commerce is advantageous
• Prior end-to-end contract infrastructure ownership and handoff experience is advantageous

• Contract position
• Remote work arrangement