layiq
worthy; deserving; fitting; suitable.
A role, opportunity, or path that merits attention, time, and pursuit.
Loading LAYIQ…Job opportunity
McLean, VA; McLean Office
Source: Clark Construction Group careers · View original posting
From Clark Construction Group's posting. “We” and “our” refer to the employer.
We are seeking a highly skilled AWS Platform Engineer to build and safeguard our AWS cloud ecosystem. You will be responsible for the end-to-end lifecycle of AWS tenant accounts, ensuring a secure, cost-optimized, and observable environment. You will bridge the gap between infrastructure and development by leveraging Infrastructure as Code (IaC) and deploying advanced AI services like AWS Bedrock.
This is an on-site position that also requires participation in an on-call rotation and availability during scheduled maintenance windows. Key Responsibilities:
Cloud Governance & Architecture
Account Provisioning: Set up and configure AWS tenant accounts in alignment with the AWS Well-Architected Framework .
Security & Compliance: Enforce company security policies (IAM, SCPs, GuardDuty) to maintain a robust security posture across all environments.
Resource Management: Enable, disable, and govern the usage of core AWS services for tenants, including S3, Lambda, and Postgres (RDS) .
AI Infrastructure Management
AWS Bedrock Operations: Manage and monitor AWS Bedrock deployments, ensuring model access, throughput limits, and performance metrics are optimized for tenant needs.
Governance: Implement guardrails for Generative AI usage within the tenant accounts.
Automation & DevOps Enablement
Infrastructure as Code (IaC): Establish and maintain IaC procedures (Terraform, CloudFormation, or Pulumi) to streamline deployment and enable seamless DevOps workflows.
Incident Management: Configure and maintain PagerDuty integrations to ensure rapid response to infrastructure alerts and system health issues.
Observability & FinOps
Monitoring: Set up comprehensive monitoring and logging stacks using CloudWatch, X-Ray, or third-party tools to ensure 360-degree visibility.
FinOps: Implement cost-allocation tags, budgets, and reporting to drive financial accountability and identify cost-saving opportunities for tenants.
IP Networking
Manage and troubleshoot TCP/IP networking, including subnetting, routing, and network protocols (DNS, DHCP, HTTP/HTTPS, SSH).
Analyze network traffic and diagnose network issues.
Manage hybrid network connections.
Security
Implement and maintain computer and systems security best practices.
Perform vulnerability management and patch management.
Utilize security monitoring tools (SIEM, IDS/IPS).
Respond to security incidents and perform malware analysis.
Implement security auditing and compliance.
Implement and maintain least privilege access.
Customer Service
Provide prompt and professional technical support to end users.
Clearly communicate technical information to non-technical users.
Resolve user issues efficiently and effectively.
Maintain a positive and helpful attitude.
Mentorship
Mentor junior team members on technical skills and best practices.
Provide guidance and support for career development.
Share knowledge and expertise with the team.
Maintenance Windows
Attend scheduled maintenance windows every other month on the third Saturday.
On-Call Rotation
Participate in an on-call rotation to provide 24/7 support for critical systems.
AWS Expertise: Proven experience with AWS Organizations, Control Tower, and core services (Compute, Storage, Database).
IaC Proficiency: Strong background in automating infrastructure with Terraform or AWS CDK .
Observability Mindset: Experience setting up dashboards, alerts, and log aggregation.
Problem Solver: Ability to manage PagerDuty rotations and lead root-cause analysis (RCA).
Emerging Tech: Familiarity with LLM infrastructure and AI services (specifically AWS Bedrock) is a significant plus.
Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
Minimum of 5+ years of experience in systems administration.
Proficiency in AWS
Deep understanding of TCP/IP networking, network protocols, and ports.
Strong skills in computer and systems security best practices.
Experience with scripting languages (PowerShell, Bash, Python).
Excellent troubleshooting and problem-solving skills.
Strong communication and teamwork skills.
Relevant certifications (e.g. AWS Certified SysOps Administrator – Associate, Azure Administrator Associate, CompTIA Security+, CISSP) are highly desirable.
Clark offers a total compensation package that includes base salary, bonus potential, and a comprehensive benefits package including health/dental/vision benefits, paid time off, retirement/401k, and Company Contribution plan. Additional benefits include life insurance, commuter benefit, short & long term disability, fitness reimbursement, FSA, tuition reimbursement, back-up daycare, tutoring & family support benefits, EAP/Work-Life assistance, and a holiday contribution program.
For this role the base salary range is $65,000-$170,000. Compensation may vary outside of this range depending on a number of factors, including a candidate’s education, experience, skills, and geographic location. Base pay is one part of the Total Compensation Package that is provided to compensate and recognize employees for their work.
LAYIQ is an independent job-discovery service. This listing does not imply a partnership with or endorsement by the employer. Review the original posting for current details and availability.
Employer posted:
Appian Corporation · McLean, Virginia
Appian Corporation · McLean, Virginia
M1 Technology · McLean, Virginia, United States
General Dynamics Information Technology · USA VA McLean; USA VA McLean - Customer Proprietary (VAC393)
Clark Construction Group · McLean, VA; McLean Office
Clark Construction Group · McLean, VA; McLean Office