Senior Software Engineer, AWS Cloud Infrastructure

Senior Software Engineer, AWS Cloud Infrastructure

United States - Remote

Location: This position may be performed remotely, but requires the flexibility and willingness to travel as needed.

The Opportunity

You will own and shape how Praxis designs, governs, secures, and operates AWS at scale—from account structure and identity to the platforms and applications that run on them. You will be a hands‑on builder, using your depth in cloud infrastructure and software engineering to create secure, reliable systems that enable our teams to move quickly.

You will work at the intersection of software engineering, cloud infrastructure, security, and operations. You will build and improve the systems that keep our teams moving fast while maintaining high standards for reliability, security, and compliance. You will work primarily in Type Script and Python, use modern AI tooling as part of your daily engineering workflow, and take direct accountability for production operations, including on‑call.

You will be expected to see problems, take ownership, and drive them through resolution. You will move quickly through incremental, well‑controlled changes, question assumptions when there is a better path, and turn operational learnings into durable improvements. Just as importantly, you will raise the bar for the people and systems around you by sharing what you know, communicating clearly, and helping the broader team build and operate better.

Primary Responsibilities

• Own and evolve AWS architecture for enterprise workloads, including multi‑account foundations, landing zone / Control Tower patterns, networking, security baselines, and shared platforms.
• Establish and continuously improve AWS governance, including organizational structure, SCPs, tagging, cost controls, compliance, audit readiness, and durable operational standards.
• Design and operate identity and access across AWS, including IAM, IAM Identity Center, and Microsoft Entra  for SSO, federation, role mapping, access reviews, and least‑privilege access.
• Build, harden, and operate AWS platforms and full-stack services using Type Script and Python, including compute, containers, serverless, data stores, messaging, and cloud automation as needed.
• Drive operational excellence across AWS platforms and workloads by building effective monitoring, alerting, dashboards, SLOs/SLIs, runbooks, incident response practices, and durable fixes to recurring problems; participate in the on‑call rotation and own incidents through resolution and learning.
• Automate infrastructure and delivery through Infrastructure as Code—preferably Pulumi and/or SST—and CI/CD using Bitbucket Pipelines and/or Git Hub Actions, with an emphasis on safe, incremental delivery and low blast radius.
• Partner across engineering and IT to translate needs into secure, maintainable solutions, improve production readiness and operational practices, mentor other engineers, and use sound judgment to move fast without breaking things.

Qualifications

• Senior-level software engineering experience, with substantial hands‑on experience building and operating production systems on AWS.
• Strong full‑stack engineering capability in Type Script and Python, including APIs, services, tooling, and cloud automation.
• Deep experience with core AWS services used in enterprise environments, including IAM, Organizations, VPC, EC2, ECS/EKS or Lambda, S3, RDS/DynamoDB, Cloud Watch, KMS, Config, and Guard Duty.
• Proven ability to design and operate AWS governance at scale, including multi‑account strategy, policy guardrails, access control, security standards, and operational controls.
• Strong AWS networking fundamentals, including VPNs, peering, Transit Gateway, routing, DNS, and hybrid connectivity.
• Experience with enterprise SSO;
  M…