T26-8660 ; Infrastructure Engineering, Off

AWS Cloud Developer (Terraform / Networking / Security) Role Summary We are seeking a hands-on AWS Cloud Developer with total exp 9+ years and strong experience in Terraform (IaC) to design, build, and manage cloud infrastructure in a highly governed enterprise environment. This role focuses on infrastructure provisioning, AWS networking, and security best practices, with an emphasis on automation and scalable architecture. The ideal candidate has real-world experience building and managing AWS environments using Terraform, not just theoretical knowledge. Key Responsibilities

• Design and implement AWS infrastructure using Terraform (Infrastructure as Code)

• Provision and manage core AWS services, including:

o S3 (buckets, policies, lifecycle, security)

o CloudTrail (logging, auditing, multi-account setup)

o IAM (roles, policies, permission boundaries, trust relationships)

• Build and manage AWS networking components:

o VPCs, subnets, routing, NAT/IGW

o VPC Endpoints (Gateway & Interface) + endpoint policies

o Transit Gateway / CloudWAN

o VPC Peering and RAM (Resource Access Manager) sharing

• Configure and manage:

o Route 53 (hosted zones, resolvers)

o AWS Cloud Map (service discovery)

o IPAM (IP Address Manager) pools and allocations

• Implement security and compliance controls:

o AWS Config

o Security Hub

o Control Tower integrations

o Develop reusable Terraform modules and maintain state management best practices

o Troubleshoot infrastructure and connectivity issues across multi-account environments

o Ensure alignment with security, governance, and least-privilege principles

Required Qualifications

• 3–6+ years of hands-on AWS experience

• Strong experience with Terraform (required):

o Writing reusable modules

o Managing state (remote backends, locking)

o Multi-account deployments

• Deep understanding of AWS Networking:

o VPC design, routing, segmentation

o Transit Gateway / CloudWAN

o VPC endpoints and private connectivity

• Strong knowledge of AWS Security:

o IAM roles, policies, permission boundaries

o SCPs (Service Control Policies)

o Logging and auditing (CloudTrail)

o Experience with multi-account AWS environments (Control Tower preferred)

• Hands-on experience with:

o AWS Config

o Security Hub

o VPC sharing (RAM)

Preferred Qualifications Experience in regulated environments (banking, enterprise, compliance-heavy)

Familiarity with:

• AWS Control Tower governance models

• CloudWAN architecture

• Centralized logging / audit accounts

• Experience integrating with CI/CD pipelines (e.g., Terraform in pipelines)

• Knowledge of OIDC / identity federation patterns

Certifications (Required / Preferred)

• AWS Certified Solutions Architect – Associate (minimum)

• AWS Certified Solutions Architect – Professional strongly preferred)

• AWS Certified Advanced Networking – Specialty (preferred)

• AWS Certified Security Specialty - (preferred)

• HashiCorp Terraform Associate Certification

What We’re Looking For (Key Signals)

• Proven ability to build AWS infrastructure from scratch using Terraform

• Strong understanding of network flows, security boundaries, and governance

• Experience working in multi-account, enterprise-scale AWS environments

• Ability to troubleshoot complex networking and IAM issues

• Not reliant on console (minimal “click-ops”) — automation-first mindset

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement