CloudOps AWS Senior – Landing Zone / Terraform / DevSecOps

Project overview

We are looking for a Senior AWS CloudOps specialist to work with a major player in the energy sector on the operation, security, and evolution of its AWS Landing Zone, an industrialized foundation for secure and automated project onboarding in AWS.

The service relies on a single consultant, with a fixed-price contract and commitment to results, and an agile SAFe organization, including quarterly PI Planning, Jira, and Confluence.

You will be responsible for:

The environment includes:

AWS: EC2, Lambda, ECS, EKS, Transit Gateway, Direct Connect, VPC, SCP, WAF, Firewall Manager, IAM Identity Center, CloudTrail, Config, GuardDuty, Security Hub, CloudWatch, and X-Ray.

Infrastructure & automation: Terraform, GitLab CI/CD, Python, PowerShell, Terratest, and Pytest.

AI: Bedrock, AgentCore.

ITSM / Observability: ServiceNow, Dynatrace, SIEM.

The technical context also includes interactions with a multi-cloud environment.

Profile Sought

We are looking for a Senior AWS CloudOps specialist, capable of working with high autonomy on demanding and complex tasks.

Operational mastery of the following areas is required:

Mandatory certifications with valid proof:

The Terraform Associate certification alone does not meet the required level of Terraform certification.

The following certifications are differentiating:

Demonstrable experience with AI-driven automation actually deployed in production, particularly with Bedrock / AgentCore, is also a significant differentiator. Experience limited to a POC does not meet this level of expectation.

The expected level corresponds to DigComp 6, with autonomy and mastery of demanding tasks on AWS, modular Terraform, Python/GitLab CI/tests, SI integration, IAM, monitoring, and logs.

The profile must also demonstrate critical thinking, autonomy, documentation rigor, and pedagogical skills, particularly in supporting and training internal teams.

• Maintaining and evolving the Landing Zone's Terraform code, designing reusable and industrialized modules.
• Implementing and maintaining infrastructure tests using Terratest / Pytest.
• Integrating and automating deployments with GitLab CI/CD.
• Deploying an isolated production Landing Zone for project needs.
• AWS operational security: IAM policies, Security Groups, NACLs, hardening, CloudTrail, Config, GuardDuty, Security Hub, and producing compliance reports.
• Using Bedrock / AgentCore to automate the management of requests and incidents, as well as infrastructure tests, with a goal of 30% reduction in manual actions.
• Processing requests, changes, and incidents via ServiceNow, in accordance with SLAs and ITIL processes.
• Monitoring, observability, and log management with CloudWatch, X-Ray, and Dynatrace, as well as their integration with the SIEM.
• FinOps activities: AWS budgets, Savings Plans, and tagging strategy.
• Assisting business projects with their onboarding onto the AWS foundation.
• Producing and maintaining documentation.
• Quarterly training of internal teams.
• AWS services and multi-account Landing Zone architectures.
• Advanced Terraform and development of reusable modules.
• Infrastructure as Code and deployment automation.
• Python, GitLab CI/CD, and test automation with Terratest/Pytest.
• AWS Security: IAM, SCP, Security Groups/NACLs, CloudTrail, Config, GuardDuty, Security Hub, WAF, and Firewall Manager.
• AWS Networking: VPC, Transit Gateway, and Direct Connect.
• EC2, Lambda, ECS, and EKS.
• Monitoring and observability with CloudWatch, X-Ray, and Dynatrace.
• Integration of logs and events with a SIEM.
• Operational management of requests, changes, and incidents with ServiceNow and ITIL processes.
• FinOps practices: budgets, Savings Plans, and tagging.
• Documentation, support for project teams, and knowledge transfer.
• AWS Certified Solutions Architect – Associate, currently valid. Professional level is an advantage.
• HashiCorp Terraform Authoring and Operations Professional / Advanced.
• AWS Certified DevOps Engineer – Professional.
• AWS Certified Solutions Architect – Professional.
• AWS Certified Security – Specialty.

Project details

• Start: ASAP
• Duration: 1 an renouvelable
• Remote: hybrid
• Location: Nanterre, Île-de-France, FR
• Languages: French