AWS Lead Engineer - Cloud Landing Zone & Infrastructure

Ltm Larsenandtoubrocompany — United States · Posted ~3 hours ago

Lead Remote

Skills

AWS AWS Control Tower Terraform CloudFormation IAM AWS Config GitLab CI/CD GitOps Kubernetes Argo CD

🔓 Log in to save this job, tailor your resume & track your apply process — 7 days free, no card needed.

Log in to add to target list

Summary ✨ AI‑Generated

A cloud engineering leadership role responsible for designing secure enterprise cloud foundations, infrastructure automation, policy enforcement, and modern deployment workflows using cloud-native technologies.

Highlights

Lead-level cloud engineering role focused on enterprise AWS architecture, automation, security controls, and scalable infrastructure delivery.

Description

Role Description AWS Lead with Control Tower and Landing Zone and Cloud Formation Remote Landing zone build Provision the multi account AWS landing zone Non Production and Production via AWS Control Tower and Account Factory AFT with clean separation of the customers IT and network domains. Guardrails identity Apply SCP guardrails and AWS Config conformance packs configure centralized logging and federate IAM Identity Center to the customer IdP Microsoft Entra ID with no local human IAM users. Secure node baseline Establish immutable Bottlerocket node OS with signedimage admission control and pertenant virtualcluster isolation boundaries. IaC pipeline Build Terraform Enterprise modules Region Local Zone persite with Sentinel policyascode gates and operate GitLab CI/CD Argo CD Flux GitOps with Cosign signing and SBOM gating. Edge Outpost activation Perform Outpost postconnection activation after AWS Service Team install and capacity confirmation validate delivered capacity carve GPU CPU instance pools configure S3 on Outposts and EB Son Outposts storage classes and ACErack aggregation per site. Network build Configure the Transit Gateway hub dual Direct Connect Route 53 ACM VPCsubnet design with pertenant isolation security groups NACLs RAM Local Gateway routing to the customer 5G RANCore and dualstack IPv4IPv6 with CNI CalicoCilium microsegmentation. Fleet automation testing Implement repeatable persite provisioning and fleetrollout automation then support network cutover system integration and GPUinference performance testing per site. Asbuilt handover Produce asbuilt landing zone network and Outpost activation runbooks plus persite activation records and support knowledge transfer to the operating team. Other Details Actual compensation within the range will be dependent upon the individual's skills, experience, performance and internal equity. Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree (“LTIM”): Benefits And Perks Comprehensive Medical Plan Covering Medical, Dental, VisionShort Term and Long-Term Disability Coverage401(k) Plan with Company matchLife InsuranceVacation Time, Sick Leave, Paid HolidaysPaid Paternity and Maternity Leave The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation. Disclaimer: The compensation and benefits information provided herein is accurate as of the date of this posting. LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family-care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.