AWS Cloud Engineer at Bright

Halcyon Labs is a forward-thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations. We leverage cutting-edge technologies to create scalable, secure, and user-friendly applications. As we continue to grow, we’re looking for a skilled AWS Cloud Engineer to join our dynamic team and contribute to our mission of transforming business processes through technology. This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential. AWS Cloud Engineer Job Title: AWS Cloud Engineer Location: 100% Remote (Continental United States) Position Type: In-house Halcyon Labs SOW engagement (no third-party client or vendor) Experience: 5+ years Salary: 100K – 150K Sponsorship: No new H1B sponsorship available. H1B transfers welcomed for qualified candidates. Employment Type: Full-time, direct W2 with Halcyon Labs (no C2C, no 1099, no third-party) Engagement: Long-term, multi-year, aligned to the Bright Vision SOW delivery roadmap Compensation: Competitive base salary commensurate with experience, plus benefits. Employment Terms & Visa Policy This is a 100% remote, full-time, direct W2 position with Halcyon Labs. This role is part of Halcyon Labs’ in-house Statement of Work (SOW) engagement. The client, end customer, and employer for this position is Halcyon Labs — there is no third-party client, vendor, or implementation partner involved. We do not engage in C2C, 1099, or third-party arrangements for this role. BUT STRICTLY NO C2C/1099/3RD PARTY COMPANIES. ALL OUR ROLES ARE W2 AND NO 3RD PARTY BROKERING PLEASE. Candidates must be willing to work directly as a full-time W2 employee of Halcyon Labs and contribute to our in-house SOW deliverables. No new H1B sponsorship is available for this role. However, candidates who are currently on a valid H1B visa and require a transfer are welcome to apply. We will support H1B transfers for qualified candidates. For every role, a technical coding assessment is mandatory. Please apply only if you are confident in your technical abilities and hands-on experience. Job Summary We are seeking an experienced AWS Cloud Engineer to design, build, and operate large-scale, secure, and highly available cloud platforms on Amazon Web Services. This is a deeply hands-on engineering role spanning architecture, infrastructure-as-code, automation, security, observability, and continuous operational improvement of mission-critical production workloads. The successful candidate will bring strong working knowledge of the AWS service portfolio, deep DevOps fundamentals, and a pragmatic, cost-aware design mindset, and will partner with application, security, and SRE teams to deliver resilient, cloud-native solutions that scale with the business. Key Responsibilities Architect, deploy, and operate enterprise-grade AWS environments across compute, networking, storage, identity, and managed data services, with strong attention to scalability, reliability, and security. Author and maintain production-quality infrastructure-as-code using Terraform, AWS CloudFormation, or AWS CDK, with rigorous version control, peer review, and automated validation. Design multi-account AWS organizations, including landing zones, SCPs, centralized logging, and shared services, to support secure and scalable enterprise adoption. Build secure VPC topologies — including subnetting, route tables, transit gateways, VPN, and Direct Connect integrations — that meet enterprise connectivity and isolation requirements. Implement strong IAM strategies using roles, permission boundaries, SCPs, AWS SSO, and short-lived credentials to enforce least-privilege access across the organization. Design, deploy, and operate Amazon EKS clusters and other container platforms (ECS, Fargate), including auto-scaling, networking, and integration with service meshes and observability stacks. Operate AWS managed data and analytics services such as RDS, Aurora, DynamoDB, S3, Redshift, Glue, and Kinesis, optimizing each for the access patterns and SLAs of the workloads it supports. Build and maintain robust CI/CD pipelines using AWS CodePipeline, CodeBuild, Jenkins, GitHub Actions, or GitLab CI, enabling repeatable, audited deployments of both infrastructure and applications. Implement comprehensive observability using CloudWatch, X-Ray, AWS Distro for OpenTelemetry, Prometheus, Grafana, and third-party tooling, with well-designed dashboards, alerts, and SLOs. Drive ongoing cost optimization through right-sizing, savings plans, reserved instances, lifecycle policies, and architectural simplification, with measurable savings tracked over time. Implement disaster-recovery and business-continuity capabilities, including cross-region replication, automated backups, regular failover testing, and documented runbooks. Streng