Senior Cloud Automation Engineer - REMOTE

Pracovní nabídka

We’re partnering with a leading global life sciences organization on a business-critical cloud automation project. This is a fantastic opportunity for engineers passionate about AWS, automation, and identity management to join a high-impact team driving large-scale transformation.

The Opportunity
As a Senior Cloud Automation Engineer, you’ll play a key role in modernizing cloud identity and access management, building scalable automation tools, and supporting a migration from legacy IAM models to AWS Identity Center (SSO). You’ll work in a hybrid setup (Prague HQ + remote flexibility) alongside experts in cloud, security, and DevOps.

This is more than just a technical role—it’s a chance to influence global cloud infrastructure strategies in one of the world’s most innovative and respected industries.

🔑 Key Responsibilities

• Design and maintain automation scripts & serverless applications (Python, Lambda) for AWS identity and infrastructure.
• Lead the migration from SAML-based IAM roles to AWS Identity Center (SSO) across multiple AWS accounts.
• Implement scalable workflows with IAM, AWS Organizations, Lambda, EventBridge, and CloudFormation.
• Integrate automation into CI/CD pipelines (Jenkins or similar).
• Ensure compliance with security and governance standards.
• Build tools to streamline onboarding, offboarding, and permissions management.
• Troubleshoot and optimize AWS automation and identity workflows.

✅ What We’re Looking For

• 3+ years of hands-on AWS infrastructure & automation experience.
• Strong Python skills, including Boto3 (AWS SDK).
• Proven background with AWS IAM, Identity Center (SSO), and multi-account organizations.
• Serverless architectures (Lambda, EventBridge, Step Functions).
• Familiarity with CloudFormation / IaC tools.
• CI/CD pipeline experience (Jenkins or similar).
• Knowledge of cloud security and identity best practices.

Nice to have: Migration experience from SAML/LDAP to AWS SSO; exposure to Okta, Azure AD, Ping Identity.

📌 Practical Details
Location: Remote
Employment Contract: 6 months (with potential extension)
Start: in 2025