Senior AWS Cloud Engineer at Mascoma Bank

White River Junction, Vermont, United States -

Full Time

Start Date

Immediate

Expiry Date

15 May, 26

Salary

0.0

Posted On

14 Feb, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

AWS, Cloud Architecture, DevOps Engineering, Terraform, Kubernetes, Docker, CI/CD, Networking, IAM, Security, FinOps, Observability, Postgres, Redis, Kafka, SCIM

Industry

Banking

Description

Description We are seeking a highly skilled Senior AWS Cloud Engineer to lead advanced cloud architecture, infrastructure deployment, and DevOps engineering in support of enterprise digital transformation initiatives! This role is responsible for designing, building, securing, and optimizing AWS environments that support mission critical platforms and applications. The ideal candidate combines deep AWS expertise with strong technical leadership, architectural thinking, automation proficiency, and the ability to foster cloud operational excellence. This position plays a key role in shaping cloud strategy, maturing DevOps practices, and mentoring engineering teams. Responsibilities Cloud Architecture & Strategic Design Develop scalable, secure AWS architectures aligned with business and technical requirements. Evaluate emerging AWS services, industry trends, and best practices to influence cloud strategy. Design and govern AWS account structures, security boundaries, and multi account landing zones. Contribute to architectural standards, technical roadmaps, and modernization initiatives. Infrastructure Deployment & Automation Provision infrastructure using Terraform, including module development, state management, and workflow governance. Deploy applications and platform components using Helm, container orchestrators, and automated CI/CD pipelines. Build reusable IaC patterns and deployment automation to support repeatable, scalable environments. Integrate automated testing, validation, and quality controls into delivery pipelines. Application & Platform Engineering Lead containerization efforts: Package and deploy Docker containers and manage and orchestrate these containers at scale using Kubernetes (AKS). Install and configure databases (Postgres, Redis), messaging systems (ActiveMQ Artemis, Kafka), middleware (JBoss/Camunda), and API gateways. Execute complex integration and configuration tasks required for platform readiness. Support application teams with cloud native design, environment setup, and troubleshooting. Networking & Identity Integration Architect and support hybrid network connectivity including AWS PrivateLink, VPNs, and inter environment routing. Implement and maintain identity integrations including SCIM provisioning, IAM roles, and federated access controls. Ensure alignment with enterprise authentication, authorization, and attribute workflows. Security, Compliance & Governance Implement security guardrails (SCPs, Config Rules, IAM policies) and enforce least privilege controls. Partner with the Risk & InfoSec teams to support compliance frameworks (FFIEC, PCI, GLBA, etc.). Participate in and collaborate on cloud threat modeling, vulnerability remediation, and incident response activities. Ensure logging, auditing, and monitoring meet enterprise and regulatory standards. FinOps & Cost Optimization Monitor and analyze AWS spend, usage patterns, and cost anomalies. Implement cost optimization techniques such as rightsizing, lifecycle policies, and Savings Plans. Provide recommendations balancing performance, reliability, and cost efficiency. Partner with leadership to support cloud budgeting and forecasting. Observability, Reliability & Operational Readiness Implement metrics, logging, distributed tracing, and alerting through CloudWatch, VPC Fflow Logs, CloudTrail, or similar tools. Design resilient cloud architectures using multi AZ, multi Region, auto scaling, and self healing patterns. Participate in on call rotations and lead incident resolution for complex issues. Develop runbooks, playbooks, and operational standards to ensure production readiness. Cross Team Collaboration & Leadership Serve as a technical lead for cloud projects, guiding architecture, tooling, and engineering direction. Collaborate closely with engineering, security, product, and vendor teams to drive cohesive cloud initiatives. Provide mentorship, training, and knowledge transfer to internal engineering and operations teams. Communicate complex cloud concepts effectively to both technical and non technical stakeholders. Work Location: This is a hybrid role based out of our Operations Center in White River Junction, VT. Requirements What You Bring 5–8+ years of hands-on AWS engineering experience in production environments. Deep expertise with AWS core services including EC2, S3, VPC, RDS, IAM, load balancers, monitoring, and networking. Strong Terraform experience (module design, state management, scalable deployments). Proficiency deploying applications using Helm, containers, and orchestration platforms. Strong networking and identity integration skills, including SCIM and Azure AD. Experience installing/configuring middleware, databases, messaging systems, and platform components. Proven ability to diagnose and resolve complex infrastructure and distributed system issues. Experience working in regulated industries is preferred. Soft Skills Excellent communication and documentation skills. Strong problem solving abilities with full ownership of tasks end to end. Comfortable collaborating across multiple internal teams and external partners. Ability to work independently within EST aligned hours. Preferred Certifications AWS Solutions Architect – Associate or Professional AWS DevOps Engineer – Professional AWS SysOps Administrator - Associate or Professional Terraform Associate Kubernetes Certifications Qualifications Ability to use and working knowledge of computers/strong typing skills Good interpersonal communication Must maintain confidentiality and privacy Professional appearance; grooming and dress consistent with MB appearance policy Working Conditions Varied work with a normal expenditure of energy and little or no unusual physical effort May involve incidental business machine operations Work involves intermittent periods of moving and being stationary Working conditions include well-lit and well-ventilated areas Travel to other Mascoma Bank locations is required for training and occasional meetings Core Competencies CONNECTS WORK TO OUR CUSTOMERS – Understanding how work impacts our external customer and consistently making data-driven decisions, avoiding assumptions about customer needs. COURAGEOUSLY CHALLENGES AND QUESTIONS – Challenging the status quo by asking questions and challenging existing processes; seeking out diverse opinions and ideas. DELIVERS VALUE FREQUENTLY – Planning and modifying work to provide value faster and more often; consistently breaking work down, planning, and delivering a minimum but viable product or service. IMPROVES CONTINUOUSLY – Demonstrates an ability to adapt and commit to new ways of doing things with a continuous improvement mindset. If you are interested in the role and do not meet 100% of the requirements, we are still interested in hearing from you! Why Mascoma Bank? Strong culture of belonging with a team that values creativity, new perspectives, and innovation. Community first minded. We care about our employees and the communities we serve. Competitive compensation. Flexible work environment with onsite, remote and hybrid opportunities. Career development and internal career mentorship. Comprehensive health care, dental care, and vision. 401(K) Program: 4% safe harbor employer match on top of 5% non-elective contributions following one year of service. Generous PTO starting at 22 days per year, not including 11 paid holidays and 16 hrs. of Volunteer Time Off. Tuition Reimbursement. Student Loan Paydown and so much more! Background and Credit Check As part of our commitment to maintaining a secure financial institution, all final candidates will be required to successfully complete background and credit screenings as part of the hiring process. These screenings will be conducted in accordance with applicable laws and industry regulations. Please note: Having a record on a background or credit report does not automatically disqualify you. We evaluate results on a case-by-case basis, considering their relevance to the role and any regulatory requirements. Our Commitment to Belonging! The communities served by Mascoma Bank consist of individuals from diverse backgrounds. Our employees likewise bring unique perspectives, experiences, and approaches to the bank. We strive to create a safe and welcoming environment for all who pass through our doors and a workplace that actively demonstrates mutual respect and trust, one of our core values. A truly inclusive culture leads to a sense of belonging and support for all team members and inspires innovation and creativity. We are committed to recruiting and retaining a diverse talent pool, increasing team member engagement through professional development and community outreach activities, and offering personal growth workshops and team-building opportunities. By embracing diversity, equity, and inclusion, we strengthen our communities and ourselves. Mascoma Bank is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, ethnicity, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, veteran status, status as an individual with a disability, or other applicable legally protected characteristics. To request reasonable accommodations, please contact careers@mascomabank.com. Mascoma Bank is an Affirmative Action and Equal Opportunity Employer, M/F/D/V.

Responsibilities

This role involves leading advanced cloud architecture, infrastructure deployment, and DevOps engineering, focusing on designing, building, securing, and optimizing AWS environments for mission-critical platforms. Key duties include developing scalable AWS architectures, provisioning infrastructure via Terraform, leading containerization efforts with Kubernetes, and ensuring security and compliance across cloud operations.