Senior Cloud Platform Engineer - AWS | AWS Landing Zone
Summary
Design and implement secure, scalable AWS cloud infrastructure for banking clients, focusing on Landing Zone architecture, IaC, and automated CI/CD pipelines in a regulated environment.
- Are you a seasoned AWS Cloud Engineer who thrives in complex, regulated banking environments, with a passion for designing and delivering secure, scalable cloud infrastructure?
- Ready to architect and implement Landing Zone solutions on AWS, leveraging Infrastructure as Code and fully automated CI/CD pipelines?
- Interested in joining a leading global software and cloud solutions provider, working in a multicloud environment alongside major banking clients?
Practical Information:
Location: Budapest, Hungary | Reports to: Engineering Manager - Azure Cloud Platform Engineering | Work Arrangement: Hybrid | Visa Requirements: Valid working visa for Hungary | Language Requirements: fluent/professional level of Hungarian and professional English, written and verbal
As our new Senior Cloud Platform Engineer, you will work closely with clients and internal teams to design, implement, and operate secure, scalable, and automated cloud infrastructure on AWS - within a strictly regulated banking environment. You will take a leading role in architecting and delivering AWS Landing Zone solutions, ensuring infrastructure compliance with regulatory frameworks such as DORA and PCI-DSS. With your solution-oriented mindset and deep IaC expertise, you will be a key contributor to our multicloud platform team.
Key Responsibilities:
- Design and implement AWS Landing Zone architecture (Control Tower, Account Factory, Organizations, SCPs) aligned with enterprise and regulatory requirements (e.g. DORA, PCI-DSS)
- Build and operate secure AWS networking solutions, including VPCs, Transit Gateway, Direct Connect/VPN, hybrid connectivity, and DNS resolution (Route 53 Resolver)
- Implement identity, access, and privileged access management (IAM, RBAC/ABAC, IAM Identity Center, Entra ID federation, JIT access, PAW, least privilege)
- Develop and maintain modular, reusable Infrastructure as Code using Terraform
- Build, optimize, and manage CI/CD pipelines using Azure DevOps and/or GitHub Actions
- Configure and operate AWS security and compliance services (Security Hub, GuardDuty, AWS Config, CloudTrail, IAM Access Analyzer)
- Maintain documentation, share knowledge across teams, and support platform reliability including participation in on-call rotation