Negotiable
Inside
Hybrid
United Kingdom
Summary: The role of AWS Cloud Engineer focuses on supporting two key initiatives: migrating applications to AWS and establishing a secure AWS Landing Zone, including AI environment development. The position requires extensive hands-on experience with AWS services, particularly in networking, compute, IAM, and secure cloud design. The contract is for an initial duration of two months and is classified as inside IR35. The role is based in London with a hybrid working arrangement.
Key Responsibilities:
- Design and build secure AWS Landing Zones (Control Tower, multi-account structure, SCPs, guardrails).
- Deliver lift-and-shift migrations of applications and services into AWS.
- Deploy and manage EC2 environments, including high-memory/GPU-enabled instances.
- Configure VPC architecture, private-only networking, subnets, routing, VPC Endpoints (Interface & Gateway), and AWS PrivateLink.
- Implement and manage IAM roles, policies, permission boundaries, and least-privilege access models.
- Deploy and support containerised workloads on EC2 using Docker.
- Integrate workloads with Amazon Bedrock Runtime APIs or other AWS AI services.
- Implement secure storage patterns using S3, bucket policies, encryption, and private access methods.
- Configure logging, monitoring, and observability through CloudWatch, GuardDuty, Security Hub, etc.
- Apply AWS security best practice, including KMS, WAF, network isolation, and encrypted workloads.
- Support hybrid connectivity patterns (VPN, Transit Gateway where required).
- Provide validation, testing, documentation, and handover to internal teams.
- Work autonomously across two projects, supporting technical workshops and stakeholder discussions.
Key Skills:
- Strong hands-on AWS engineering capability.
- Experience with AWS Landing Zones and Control Tower.
- Proficiency in lift-and-shift migrations.
- Knowledge of EC2, VPC architecture, and IAM management.
- Experience with Docker and containerised workloads.
- Familiarity with Amazon Bedrock and AWS AI services.
- Understanding of secure storage patterns and AWS security best practices.
- Ability to configure logging and monitoring tools like CloudWatch.
- Experience with hybrid connectivity solutions.
- Strong documentation and communication skills.
Salary (Rate): £500 per day
City: London
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: inside IR35
Seniority Level: Senior
Industry: IT
Detailed Description From Employer:
AWS Cloud Engineer - Landing Zones & AI
London (Hybrid)
£500 per day Inside IR35
2 Month initial contract
We're looking for a senior AWS Cloud Engineer to support two concurrent initiatives: a lift-and-shift migration into AWS and the build-out of a secure AWS Landing Zone, including work on an AI environment using Amazon Bedrock and containerised workloads. The role requires strong hands-on AWS engineering capability across networking, compute, IAM, and secure cloud design.
Skills & Responsibilities
- Design and build secure AWS Landing Zones (Control Tower, multi-account structure, SCPs, guardrails).
- Deliver lift-and-shift migrations of applications and services into AWS.
- Deploy and manage EC2 environments, including high-memory/GPU-enabled instances.
- Configure VPC architecture, private-only networking, subnets, routing, VPC Endpoints (Interface & Gateway), and AWS PrivateLink.
- Implement and manage IAM roles, policies, permission boundaries, and least-privilege access models.
- Deploy and support containerised workloads on EC2 using Docker.
- Integrate workloads with Amazon Bedrock Runtime APIs or other AWS AI services.
- Implement secure storage patterns using S3, bucket policies, encryption, and private access methods.
- Configure logging, monitoring, and observability through CloudWatch, GuardDuty, Security Hub, etc.
- Apply AWS security best practice, including KMS, WAF, network isolation, and encrypted workloads.
- Support hybrid connectivity patterns (VPN, Transit Gateway where required).
- Provide validation, testing, documentation, and handover to internal teams.
- Work autonomously across two projects, supporting technical workshops and stakeholder discussions.
If you are available and interested in this opportunity, please apply for further information. Please note, due to high volumes of applications we are unable to contact every applicant.
If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion.
At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values of Honesty, Integrity and Pragmatism. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced individuals, regardless of personal characteristics.
If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us.