AWS Engineer (Cloud)

TL;DR

AWS Engineer (AWS/Terraform): Designing and implementing scalable, secure AWS Landing Zones and multi-account platforms for a large banking group with an accent on cloud governance, networking foundations, and IaC automation. Focus on building account vending capabilities, enforcing security guardrails via SCPs, and optimizing hybrid connectivity between on-premises datacenters and AWS.

Location: Hybrid (Prague, Czech Republic). Valid work permit for the Czech Republic is required.

Company

Global provider of software and cloud solutions that helps organizations optimize technology investments and drive digital transformation.

What you will do

• Build and evolve AWS Landing Zone and AWS Organization structures across multiple business entities.
• Design and implement multi-account AWS environments at enterprise scale using Terraform.
• Develop Account Vending and Account Factory capabilities for self-service provisioning.
• Implement governance guardrails using SCPs, Control Tower, and resource-based policies.
• Design enterprise IAM strategies including ABAC, Permission Sets, and Identity Center.
• Create secure networking foundations including Hub-Spoke architectures, Transit Gateway, and Direct Connect.

Requirements

• Valid work permit for the Czech Republic.
• Fluent/professional Czech and communicative English.
• Practical experience with AWS Organizations and designing enterprise landing zones.
• Expert knowledge of Terraform, including module design and lifecycle management.
• Experience with GitHub Actions and CI/CD implementation for platform services.
• Proficiency in cross-account networking, Hybrid DNS, and security hardening (CloudTrail, GuardDuty).

Culture & Benefits

• Hybrid work model combining home office and Prague office presence.
• Generous time off with 25 vacation days plus seniority bonuses.
• Wellness perks including a Multisport card and free weekly office physiotherapy.
• Financial support for annual public transport passes.
• Focus on continuous growth through language classes and professional certifications.
• Team bonding activities such as rooftop barbecues and monthly breakfasts.