Senior AWS Cloud Engineer (Contract-to-Hire)

About the role

Eggmed is a HIPAA‑compliant EHR and practice‑management platform that needs robust, secure cloud infrastructure. As a Senior AWS Cloud Engineer you will own the end‑to‑end AWS environment, write the runbooks, and ensure the platform can scale while keeping patient data safe.

Key responsibilities

• Design, implement and evolve the AWS environment including VPC, ECS/Fargate, CloudFront, RDS/Aurora, S3 and related networking components.
• Codify infrastructure using Terraform, enforce a no‑drift policy and manage state.
• Build and harden the container platform: Docker images, ECR lifecycle, task role least‑privilege, resource limits.
• Secure API exposure with WAF, TLS termination, rate limiting and private networking.
• Develop and maintain CI/CD pipelines for automated testing, image builds, staged rollouts and fast rollbacks.
• Implement HIPAA technical safeguards: encryption at rest and in transit, key management, audit logging, access reviews, backup and disaster‑recovery with defined RPO/RTO.
• Establish reliable observability (metrics, logs, traces, alerts) and on‑call runbooks.
• Support SOC 2 and customer security reviews with concrete evidence.
• Optimize AWS spend through right‑sizing, autoscaling, lifecycle policies and Savings Plans.
• Maintain a small Azure footprint as needed.

Required profile

• 8+ years of production‑level AWS experience, preferably in a regulated or healthcare setting.
• Hands‑on experience with ECS on Fargate, ECR, Lambda and container orchestration.
• Deep knowledge of AWS networking (VPC, subnets, security groups, NACLs, NAT gateways, PrivateLink, Route 53, ACM).
• Proficiency with CloudFront distribution design and cache‑control mechanisms.
• Strong background in RDS/Aurora PostgreSQL administration.
• Experience building CI/CD pipelines and implementing infrastructure as code with Terraform.
• Demonstrated ability to implement HIPAA and SOC 2 security controls.

Required skills

• AWS (VPC, ECS/Fargate, Lambda, CloudFront, RDS/Aurora, S3, Route 53, ACM)
• Terraform
• Docker & ECR
• CI/CD pipelines (Git, automated testing, image builds)
• Network security (WAF, TLS, PrivateLink)
• HIPAA compliance and SOC 2 evidence gathering
• Observability tools (metrics, logs, tracing, alerting)
• Cost optimization (right‑sizing, Savings Plans)
• Basic Azure administration