AWS Engineer

Location: Prague, Czech Republic; hybrid work with home office and regular time in the Prague office. A valid Czech Republic work permit is required.

Company

hirify.global and Crayon have formed a global software and cloud solutions provider operating in more than 70 countries with over 13,000 professionals.

What you will do

• Build and evolve AWS Landing Zones and AWS Organizations across multiple business entities and organizational units.
• Design and implement enterprise-scale multi-account AWS environments.
• Develop Terraform modules and Infrastructure-as-Code automation, including Account Vending and Account Factory capabilities.
• Implement governance guardrails with SCPs, Control Tower controls, and resource-based policies.
• Design IAM strategies covering ABAC, roles, permission sets, permission boundaries, and IAM Identity Center.
• Build secure networking and security baselines, including Transit Gateway, VPC Endpoints, Direct Connect, hybrid connectivity, CloudTrail, GuardDuty, logging, and monitoring.

Requirements

• Practical experience with AWS Organizations, OU structures, enterprise Landing Zones, SCPs, Control Tower, and governance controls.
• Experience operating large multi-account AWS environments.
• Expert knowledge of Terraform, including module design and lifecycle management.
• Experience with GitHub, GitHub Actions, CI/CD, Direct Connect, cross-account networking, VPC Endpoints, and hybrid DNS between on-premises datacenters and AWS.
• Experience with IAM, ABAC, permission sets, permission boundaries, BYOK/CMK encryption, CloudTrail, GuardDuty, and AWS security hardening.
• Fluent or professional Czech is required; communicative English is required. A valid Czech Republic work permit is required.

Culture & Benefits

• 25 vacation days plus up to 5 additional long-service days.
• Hybrid work combining home office and time in the Prague office.
• Multisport card, weekly physiotherapy sessions, coffee, and snacks.
• Annual public transport pass covered.
• Language classes and professional certifications aligned with career development.
• Annual team events and regular informal team gatherings.