Cloud Infrastructure Engineer

Provision R2 Agency B AWS environment end-to-end: VPC design (subnets, NACLs, security groups), IAM roles/policies, KMS encryption keys

. Deploy Lake Formation infrastructure for R2: data catalogs, LF permissions, cross-account resource sharing with Central Platform

. Set up CI/CD pipelines integrated with SHIP-HATS (Government Agency mandated toolchain) - GitLab CI → CodePipeline → automated deployment

. Configure networking for cross-agency connectivity: VPC peering / Transit Gateway to Central Platform, PrivateLink for service access

. Build monitoring stack: CloudWatch dashboards, CloudTrail audit logging, AWS Config rules for compliance drift detection

. Implement RBAC framework: Lake Formation fine-grained permissions, IAM boundary policies, tag-based access control (TBAC) for data zones

. Provision pre-production and integration testing environments mirroring production topology

. Security hardening: encryption at rest (KMS CMK) and in transit (TLS), S3 bucket policies, VPC endpoints for all AWS service access

. Support Inho (Tech Lead) on cross-release infrastructure patterns

. Infrastructure documentation: architecture diagrams (

draw.io/Lucidchart

), runbooks, IaC code repo with PR review process

. Participate in daily stand-ups, sprint demos, and infrastructure design reviews
Required skills: VPC, IAM, CloudFormation/CDK/Terraform, CI/CD (CodePipeline/GitLab CI), networking, Linux admin, security (SCPs, encryption)