AWS Platform Engineering Lead

At cb5, we are on a mission to find exceptional talent. Our tight-knit organization is led by five brothers, each technology leaders in their respective technical fields and driven to foster a culture of excellence through solidarity. We are seeking an AWS Platform Engineering Lead to stand up and own the AWS platform for a greenfield Department of Defense hybrid multi-cloud program.

This team is on the front lines, shaping the systems that protect us from advanced threats. We are looking for highly motivated, results-oriented professionals who thrive on solving complex technical challenges in a dynamic environment.

The AWS Platform Engineering Lead is the technical authority for AWS on the program. You will design and build the AWS foundation, including the multi-account structure, landing zones, guardrails and service control policies, platform networking, and the platform services mission workloads run on. AWS is one of three platforms in this environment, alongside Azure and on-premises VMware Cloud Foundation, so much of the work is holding AWS to one program reference architecture rather than letting it become a separate design.

The role is the direct engineering counterpart to the platform vendor and to the customer’s cloud architecture leadership, and it is hands-on. You will write the infrastructure code that stands the platform up, not only the design that describes it.

This is a full time position working onsite in either Colorado Springs, CO or Huntsville, AL, requiring less than 10% travel.

The candidate will:

• Serve as the technical authority for AWS, owning the AWS platform architecture, engineering standards and design decisions.
• Design and build the AWS multi-account structure and landing zones, including Organizations, organizational units, account vending, and separation of platform from workload.
• Own AWS governance, including service control policies, permission boundaries, IAM role and policy standards, tagging, and cost management guardrails.
• Design AWS platform networking with the Network team, including VPC topology, Transit Gateway, Direct Connect and hybrid connectivity, DNS, and network security controls.
• Integrate AWS with the program identity architecture, including federation to the enterprise identity provider, IAM Identity Center, and privileged access for platform administration.
• Build the AWS platform through Infrastructure as Code using the program automation standards, and contribute AWS modules back to the shared library.
• Design platform security and compliance, including hardened baselines and images, key and secret management, logging and audit trails, and the evidence accreditation depends on.
• Design monitoring, resilience and recovery for the AWS platform, including telemetry, availability targets, and backup and recovery patterns.
• Serve as the engineering counterpart to the platform vendor and to customer cloud architecture leadership, and prepare AWS courses of action and design decisions for architecture review.
• Keep AWS aligned to the program reference architecture so identity, network, security and data patterns match what is delivered on Azure and on-premises.
• Support migration and application modernization by designing the target AWS landing zones and the platform capabilities each migration wave depends on.
• The successful candidate will:
  • Be a strong innovator in process improvement and system design.
  • Be able to quickly learn challenging concepts, decompose difficult service problems and provide resolution.
  • Be able to create and follow standard processes and clearly document results.
  • Effectively function as self-starter and identify risks, issues, and opportunities to leadership.
  • Have excellent presentation, oral and written skills…