AWS Engineer in Portland, Oregon - #72619 | VanderHouwen

Description

Job Id: 72619

AWS Engineer
Our client is seeking an AWS Engineer to help build and implement a secure cloud environment designed to support sensitive research initiatives and controlled data access. This individual will work closely with technical stakeholders to translate established requirements into scalable AWS solutions while enabling a seamless experience for diverse user groups. The ideal candidate brings deep AWS expertise, strong infrastructure automation skills, and the ability to implement complex security controls within enterprise environments.

This role is fully remote.

AWS Engineer Responsibilities

• Design, build, and deploy a secure AWS-based environment that enables internal and external users to conduct research activities while adhering to defined architectural and security requirements.
• Translate completed requirements and security documentation into technical solutions that support the full lifecycle of a Trusted Execution Environment.
• Develop and maintain infrastructure using Infrastructure-as-Code methodologies, leveraging Terraform, CloudFormation, and other automation tools to ensure repeatable deployments.
• Configure and administer AWS Research and Engineering Studio (RES) environments, including the creation and management of research workspaces and user access models.
• Implement and support end-user computing solutions using Amazon WorkSpaces and AppStream 2.0 to provide secure, role-based access to approved applications and datasets.
• Design and maintain workspace templates equipped with designated research tools and software packages, such as statistical and analytical applications commonly used by business and research teams.
• Build and integrate identity and authentication capabilities with existing enterprise systems using technologies such as SAML, OIDC, SCIM, and AWS IAM Identity Center.
• Establish and enforce role-based and attribute-based access controls, ensuring least-privilege principles are consistently applied across environments.
• Develop secure file transfer and data movement capabilities using services such as AWS Transfer Family and AWS DataSync.
• Configure project-level storage strategies utilizing Amazon S3, including granular authorization models, audit controls, object retention, and archival processes.
• Implement backup, recovery, and long-term retention strategies using AWS Backup and archival storage services.
• Configure and maintain automated workflows utilizing AWS Step Functions and other native AWS services to streamline operational processes.
• Partner closely with security and compliance stakeholders to implement required technical controls and remediate identified gaps.
• Support operational monitoring, troubleshooting, performance tuning, and incident response activities across the environment.
• Produce and maintain technical documentation, architecture artifacts, operational procedures, and knowledge transfer materials.

AWS Engineer Qualifications

• Demonstrated experience designing, implementing, and supporting complex AWS environments within enterprise organizations.
• Experience with AWS Research and Engineering Studio (RES) or comparable secure workspace solutions is strongly preferred.
• Hands-on expertise with Amazon WorkSpaces, AppStream 2.0, EC2, Amazon S3, and related AWS infrastructure services.
• Experience developing Infrastructure-as-Code solutions using Terraform and CloudFormation.
• Experience integrating AWS environments with enterprise identity and authentication platforms.
• Strong understanding of IAM Identity Center, SAML 2.0, OIDC, SCIM synchronization, least-privilege principles, MFA enforcement, and attribute-based access controls.
• Experience implementing secure data transfer and storage capabilities using services such as AWS Transfer Family and AWS DataSync.
• Knowledge of encryption and key management practices utilizing AWS KMS and industry-standard approaches to protecting sensitive information.
• Hands-on experience supporting AWS security and monitoring services, including GuardDuty, Amazon Macie, Security Hub, CloudTrail, AWS Config, CloudWatch, VPC Flow Logs, and S3 Access Logs.
• Familiarity with Service Control Policies (SCPs), drift detection, and governance practices within multi-account AWS environments.
• Familiarity implementing technical controls aligned with StateRAMP and NIST 800-53 Moderate requirements is preferred.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and collaboration abilities with cross-functional technical stakeholders.

Compensation: (DOE)

VanderHouwen Contractors Enjoy Exceptional Benefit Perks!
As an eligible contract employee with VanderHouwen, you’ll have access to a full suite of benefits designed with your well-being in mind. Our comprehensive package includes medical, dental, vision, life insurance, short- and long-term disability, and a matching 401(k) to help secure your future.

Meet VanderHouwen
What kind of recruiter do you see yourself working with? One who prioritizes your best interest, no matter what? VanderHouwen does, and we’re in it for the long game! Our recruiters focus on YOU, building meaningful, long-term relationships while developing a deep understanding of companies’ staffing needs and workplace cultures. This approach helps us find an ideal job match that aligns with your unique career aspirations and goals.

VanderHouwen is an award-winning, Women & Diversity-Owned, WBENC certified professional staffing firm. Founded in 1987, VanderHouwen places experienced professionals across the nation! Our recruitment teams specialize in either Technology and IT, Engineering, Human Resources, or Accounting and Finance career markets. Partner with us to land your next exciting career!

VanderHouwen is an Equal Opportunity Employer and participates in E-Verify. VanderHouwen does not discriminate based on race, color, religion, sex, national origin, age, disability, or any other characteristic protected by applicable local, state, or federal civil rights laws.

#LI-Remote