AWS Cloud SME

AWS Cloud SME

Location:

Canada—Remote
Pay Rate: $120/hr
Contract Length: 45 Days
We at Raise are hiring an   AWS Cloud SME   for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand. We’re hiring right now; if you’re interested, apply below for your chance to join a great place to work.
Responsibilities:
AWS Landing Zone & Governance
Design and implement AWS Landing Zone (single-region—Toronto)
Configure AWS Organizations, OUs, and Service Control Policies (SCPs)
Establish governance standards (tagging, naming, cost management)
Enable baseline services (Cloud Trail, Config, Guard Duty)
Networking & VPC Architecture
Design and implement VPC architecture (CIDR, subnetting, AZ distribution)
Configure:
Public and private subnets
Route tables, NAT Gateway, IGW

Implement VPC Endpoints (S3, Glue, STS)
Define and enforce:
Security Groups
Network ACLs

Ensure secure connectivity between AWS and Splunk Cloud
Identity & Access Management
Integrate AWS IAM with Microsoft Entra  (SAML/SSO)
Design RBAC model aligned with least privilege principles
Create IAM roles/policies for:
Splunk Federated Search
AWS Glue
S3 access

Enforce MFA and conditional access policies
Data Services Configuration (S3 & Glue)
Design and configure Amazon S3 buckets:
Data ingestion
Federated datasets

Implement:
Encryption (SSE-KMS)
Lifecycle policies
Access controls
Configure AWS Glue:
Data Catalog
Crawlers
Tables

Ensure Glue integration with Splunk FS
Splunk Federated Search Integration
Configure AWS-side integration for Splunk Federated Search
Enable secure connectivity between Splunk and AWS services
Validate federated queries across S3 datasets
Support index mapping and access control configuration
Security, Compliance & Policies
Implement:
Encryption in transit and at rest
IAM governance policies

Enable audit logging and monitoring (Cloud Trail, Config)
Ensure compliance with VIA Rail security standards
Perform security validation and risk assessment
Monitoring & Observability
Configure Cloud Watch monitoring and alerting
Integrate AWS logs into Splunk for centralized observability
Create dashboards for:
S3 usage
Glue jobs
IAM activity

Testing & Validation
Perform:
Connectivity validation (Splunk ↔ S3 ↔ Glue)
IAM and access validation

Execute performance and security testing
Support client sign-off activities
Documentation & Knowledge Transfer
Produce architecture and configuration documentation
Deliver operational runbooks
Conduct knowledge transfer sessions for VIA Rail teams
Required Skills & Expertise
Core AWS Expertise
Strong hands-on experience with:
VPC, Subnets, Routing, NAT, IGW
AWS Organizations and Landing Zone design
IAM roles, policies, and federation

Experience with :
Amazon S3 (security, lifecycle, encryption)
AWS Glue (Data Catalog, Crawlers, ETL basics)

Knowledge of:
Cloud Watch, Cloud Trail, AWS Config

Networking & Security
Deep understanding of:
TCP/IP, CIDR, subnetting
Firewall rules, security groups, NACLs

Experience implementing:
Private connectivity (VPC endpoints, Private Link)
Secure hybrid/cloud architectures

Knowledge of encryption standards (TLS, KMS)
Identity & Federation
Hands-on experience integrating AWS with Microsoft Entra
Expertise in:
SAML 2.0 federation
RBAC design
MFA and conditional access

Splunk & Data Integration (Preferred)
Experience working with Splunk Cloud Platform
Understanding of:
Splunk Federated Search architecture
Data lake integrations (S3-based analytics)

Familiarity with log ingestion and query optimization
Dev Ops & Automation (Good to Have)

Experience with :
Infrastructure as Code (Terraform, Cloud Formation)
CI/CD pipelines

Automation of AWS provisioning and configurations
Compliance & Governance

Experience with :
Enterprise cloud governance models
Policy enforcement (SCPs, IAM policies)

Understanding of regulatory and audit requirements
Soft Skills & Consulting Capability
Strong stakeholder communication (technical + business)
Ability to translate requirements into architecture and implementation
Experience working in client-facing consulting roles
Documentation and presentation skills (SOW, HLD/LLD)
Experience Requirements
8+ years of IT experience
4–6+ years of hands-on AWS experience
Experience…