Kerv

AWS Engineer

Kerv

full-time

Posted on:

Location Type: Remote

Location: United Kingdom

Visit company website

Explore more

AI Apply
Apply

About the role

  • Help run and improve AWS environments across production and development, with a strong focus on security, stability, compliance and cost control.
  • Work with existing security tooling, including OX Security and Wiz, to identify and prioritise vulnerabilities, drive remediation activity, and maintain a forward plan to reduce risk and improve security posture.
  • Work within change control process, making sure infrastructure changes are properly assessed, documented, scheduled and communicated.
  • Look for opportunities to automate repeatable operational tasks, improve consistency, reduce manual effort and support ongoing cost optimisation across cloud estate.
  • As part of a small team, work closely with engineering, service and product colleagues to keep platforms secure, resilient and efficient.
  • Manage the day-to-day operation of AWS and Azure environments across multiple customer and internal estates.
  • Plan and deliver patching, system updates and infrastructure changes.
  • Use OX Security, Wiz and other tools to identify, triage and track vulnerabilities through to resolution.
  • Maintain a prioritised programme of work covering remediation, technical debt and broader security improvements.
  • Contribute technical input into change control, including impact assessments, implementation plans, rollback plans and scheduling.
  • Maintain and improve CIS-aligned configurations and controls where required.
  • Drive cost optimisation initiatives across AWS, including usage reviews, rightsizing and reducing waste.
  • Improve operational efficiency through automation, scripting and better tooling.
  • Support incident resolution, root cause analysis, documentation and continuous improvement.

Requirements

  • Hands-on experience supporting cloud infrastructure in live production environments, with strong experience in AWS and working knowledge of the other.
  • Experience of day-to-day infrastructure operations, including patching, vulnerability remediation and implementing production changes.
  • Experience working within a controlled change process in a production environment.
  • A solid understanding of cloud security fundamentals, including identity and access management, networking, platform hardening and general security best practice.
  • Experience using automation or scripting to reduce manual effort and improve operational consistency.
  • Strong organisational, troubleshooting and communication skills, with the ability to prioritise work and see actions through to completion.
  • Awareness of security and compliance requirements such as Cyber Essentials, CIS or similar good practice.
  • Ideally you will also have: Experience across both AWS and Azure.
  • Experience with OX Security, Wiz, or similar cloud security and posture management tooling.
  • Experience supporting multi-customer or multi-tenant environments.
  • Experience with Infrastructure as Code or configuration and deployment tooling such as Terraform, Ansible, Jenkins, PowerShell, Bash or Python.
  • Experience supporting public-sector or other regulated environments.
  • Experience identifying and delivering cloud cost optimisation initiatives.
  • Experience supporting operational escalations or working closely with a Service Desk.
  • Relevant certifications such as AWS, Azure, security or ITIL qualifications.
Benefits
  • Travel to client sites although very unlikely may occur and will be fully reimbursed by Kerv Group.
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
AWSAzurevulnerability remediationpatchingInfrastructure as CodeTerraformAnsibleJenkinsPowerShellPython
Soft Skills
organisational skillstroubleshooting skillscommunication skillsprioritisationautomationproblem-solvingcollaborationdocumentationcontinuous improvementchange management
Certifications
AWS certificationAzure certificationsecurity certificationITIL certification