AWS Cloud Engineer

About the role

Ensign Services, Inc. (“ESI”) is a subsidiary of The Ensign Group, Inc., a leader in the post-acute care industry. ESI supports over 378 facilities employing over 55,000 employees through back-office services including accounting, construction, compliance, human resources, information technology, learning and development, legal and risk management, and recruiting.

Job Duties and Responsibilities

• Collaborate with teams to design AWS-based solutions tailored to project requirements.
• Recommend appropriate AWS services for new initiatives and migrations.
• Manage AWS resources across multiple accounts, implementing automation where possible.
• Deploy workloads to production environments following best practices.
• Maintain organizational control policies to ensure compliance with security and governance standards.
• Configure and manage AWS security services (IAM, KMS, Security Hub, GuardDuty, etc.).
• Enforce least-privilege principles and prevent overly permissive IAM roles or security groups.
• Monitor and remediate security vulnerabilities across AWS accounts.
• Implement centralized logging and auditing solutions for compliance.
• Serve as the primary point of contact for AWS-related issues and inquiries.
• Assist teams in troubleshooting development and production issues.
• Build integrations for AWS-based processes as necessary.
• Write Python scripts for automation, resource provisioning, and security enforcement.
• Develop automated workflows for resource provisioning and security enforcement.
• Ensure adherence to organizational security controls and compliance frameworks.
• Provide guidance and training to teams unfamiliar with AWS.

Preferred Qualifications

• AWS Certified Solutions Architect – Associate or Professional, preferred.
• AWS Certified Security – Specialty, preferred.
• Strong experience in AWS architecture and administration across multi-account environments.
• Deep understanding of AWS security services and best practices.
• Proficiency in automation tools (CloudFormation, Terraform, or similar).
• Proficiency in Python for automation and integration tasks.
• Familiarity with monitoring and logging solutions (CloudWatch, AWS Config, etc.).
• Excellent troubleshooting and problem-solving skills.
• Strong communication and collaboration abilities.

Additional Information

Pre-employment criminal background screening required. For more information about our benefits and compensation package, visit www.ensignbenefits.com. Ensign Services, Inc. is an equal opportunity employer.