[Hiring] Senior Cloud / AWS Infrastructure Engineer @Reflex Media

Role Description

Seeking.com is hiring a Senior Cloud / AWS Infrastructure Engineer to build, operate, and secure the AWS environment that runs our products.

• The environment is AWS Organizations with Control Tower, accounts vended through Account Factory for Terraform, and governance applied through global and per-account customization layers.
• Infrastructure is Terraform, delivered through a versioned in-house module library.
• Workloads run across ECS Fargate, Aurora MySQL and PostgreSQL, ElastiCache, EFS, Lambda, OpenSearch, Redshift, MWAA, and Bedrock, with Cloudflare at the edge.
• Disaster recovery: Building cross-region DR for a flagship platform from the ground up.
• Security engineering: Identity hardening, replacing static credentials with federated and role-based access, extending preventive and detective controls.

Qualifications

• Five or more years building and operating production AWS infrastructure.
• Strong Terraform in a team setting: module design and versioning, remote state, drift, and PR-based workflows.
• Multi-account AWS Organizations or Control Tower experience, including SCPs and cross-account IAM.
• Deep IAM: policy and trust-policy design, permission boundaries, and least privilege in practice.
• Production container experience on ECS or Kubernetes, and managed relational databases.
• Python or Bash for automation and tooling.
• Experience migrating or consolidating legacy infrastructure without downtime.
• Clear writing, and the judgment to weigh risk, cost, and delivery speed against each other.
• Daily use of Claude, Claude Code, and Cowork in your engineering workflow.

Requirements

• Design and build cross-region recovery for a flagship platform.
• Establish RPO and RTO targets with the business, map dependencies into recovery tiers, and define restoration order.
• Standardize backup policy and retention across the estate.
• Run scheduled DR tests and game days, and write runbooks that make recovery repeatable.
• Design least-privilege IAM policy and IAM Identity Center permission sets.
• Replace long-lived IAM access keys with federated SSO, OIDC, and assumed-role access.
• Author and maintain SCPs and organization controls, plus automated remediation.
• Extend detective controls: AWS Config rules and conformance packs.
• Own secrets management on Secrets Manager and SSM Parameter Store.
• Support incident response and CloudTrail forensics.
• Operate core infrastructure: monitoring, alerting, AWS Backup, and patch and lifecycle management.
• Improve our Prometheus, Grafana, and Alertmanager stack.
• Debug production issues across compute, storage, networking, and databases.
• Automate operational work in Python and Bash, and improve CI/CD for infrastructure.
• Keep Control Tower and the landing zone current.

Benefits

• Base salary: $130,000 to $180,000, commensurate with experience.
• 99 percent coverage of medical, dental, and vision insurance.
• 65 percent coverage for qualified dependents.
• 100 percent coverage of short-term disability, long-term disability, and life insurance.
• 50 percent 401(k) match up to 6 percent per month.
• Flexible Spending Account.
• Flexible paid time off.
• Professional development budget covering AWS certifications and conferences.