AWS Engineer - RDS IAM

Location: Onsite 3 days a week;
Hybrid – Office location is Chandler AZ

Required Pay Scale: $80-85 hr W2

Eligibility: Due to client requirements this role is only open to USC or GC candidates

• Simplifying development and deployment of serverless applications for AI/ML stack
• Providing advanced troubleshooting and debugging solutions for serverless applications
• Integrating serverless applications with other SaaS services and cloud infrastructures

• AWS Architect with hands‑on experience in building Terraform modules and CI/CD experience using Terraform Enterprise.
• AWS Architecture with strong knowledge on Database products, IAM, network; hands‑on experience with Terraform; strong CI/CD experience with Bitbucket/Terraform Enterprise. Ansible Playbook experience is a plus.
• Design end‑to‑end solution for AWS Database products via infrastructure as code through Terraform.
• Proven Terraform hands‑on experience (7 years) building reusable IaC modules, managing state, work spaces, remote backends, and environment promotion patterns.
• Terraform Enterprise (TFE) experience: workspace design, policy‑as‑code (Sentinel/OPA where applicable), variable management, VCS‑driven workflows, and run governance.
• Strong CI/CD implementation experience integrating Bitbucket pipelines (or Bitbucket + runners) to automate Terraform plans/applies with quality gates and approvals.
• Strong AWS architecture expertise designing secure, scalable, highly available solutions across multi‑account and multi‑region environments.
• Deep knowledge of AWS database services (RDS/Aurora, DynamoDB, Document DB, Elasti Cache, Open Search) including HA/DR patterns, performance, and cost optimization.
• Hands‑on IAM expertise: designing least‑privilege access, IAM roles/policies, permission boundaries, SCPs, cross‑account access, and federation/SSO integration.
• Strong AWS networking skills: VPC design, subnets, route tables, NAT/IGW, Transit Gateway, VPC endpoints/Private Link, security groups/NACLs, DNS (Route 53), and hybrid connectivity (VPN/Direct Connect).
• Security and compliance mindset: encryption (KMS), secrets management (Secrets Manager/Parameter Store), auditability (Cloud Trail), logging/monitoring (Cloud Watch), and alignment to enterprise controls.
• Automation tooling experience (Plus):
  Ansible playbooks for configuration automation, orchestration, and post‑provisioning tasks in hybrid/cloud environments.

Matlen Silver is an Equal Opportunity Employer and considers all applicants for all positions without regard to race, color, religion, gender, national origin, age, sexual orientation, veteran status, the presence of a non‑job‑related medical condition or disability, or any other legally protected status.

If you are a person with a disability needing assistance with the application at any point in the hiring process, please contact us at email and/or phone at  // 908‑393‑8600