AWS Engineer

Job Function

Services

The role

• Do you want to design and implement scalable, secure, and cost-effective solutions on AWS and influence the organization's cloud architecture and strategy?
• Are you interested in a role where you combine deep technical expertise with stakeholder engagement, lead architectural decisions, and mentor others?
• Are you interested in becoming part of a leading global provider of software and cloud solutions that helps organizations optimize technology and drive digital transformation?

Practical Information

Location: Prague, Czech Republic | Leader: Cloud Services Lead | Working Model: Hybrid | Job Type: Full time | Visa: Valid work permit for the Czech Republic | Language requirements: Fluent/professional Czech (written and spoken), communicative English

Join the Cloud Platform team responsible for building and governing a centralized AWS Landing Zone and multi-account platform for a large banking group. The role focuses on designing, implementing, and enforcing cloud governance, security guardrails, networking foundations, and self-service account provisioning capabilities used by internal application teams.

Key Responsibilities

• Build and evolve AWS Landing Zone and AWS Organization structures across multiple business entities and Organizational Units (OUs).
• Design and implement multi-account AWS environments at enterprise scale.
• Develop and maintain Terraform modules and Infrastructure-as-Code automation.
• Build Account Vending and Account Factory capabilities for self-service account provisioning.
• Implement governance guardrails using SCPs, Control Tower controls and resource-based policies.
• Design IAM strategy including ABAC (Attribute-Based Assess Control), IAM Roles, Permission Sets, Permission Boundaries and IAM Identity Center.
• Create secure networking foundations, including Hub-Spoke architectures, Transit Gateway, VPC Endpoints, Direct Connect, and hybrid connectivity between on-premises datacenters and AWS.
• Build security baselines including CloudTrail, GuardDuty, logging, monitoring and service hardening.
• Define and enforce approved service catalog and cloud standards consumed by internal application teams.

What we need to see from you

• Practical experience with AWS Organizations.
• Real-world experience designing OU structures and enterprise landing zones.
• Hands-on implementation of SCPs, Control Tower and governance controls.
• Experience operating large multi-account AWS environments.
• Expert Terraform knowledge, TF modules design and lifecycle management.
• GitHub and GitHub Actions automation.
• CI/CD implementation for platform services.
• Direct Connect.
• Cross-account networking.
• VPC endpoints.
• Hybrid DNS setup between on-premises datacenters and AWS.
• IAM, ABAC (Attribute-Based Access Controls) and enterprise access models.
• Permission Sets and Permission Boundaries.
• Encryption using BYOK/CMK.
• CloudTrail, GuardDuty and AWS security hardening.

At SoftwareOne Czech Republic, we believe work should fit around life - not the other way around. Here’s what you can look forward to when joining our team:

• Plenty of time off – 25 vacation days plus extra days for long service (up to 5 more)
• Flexibility that works – enjoy our hybrid setup, combining home office and time in our Prague space
• Fun & connection – annual team events, rooftop barbecues, and casual monthly breakfasts with your teammates
• Wellbeing support – a Multisport card, free weekly physiotherapy sessions in the office, and coffee & snacks always ready
• Commuting made easy – we cover your annual public transport pass
• Continuous learning – language classes and professional certifications aligned with your growth path

Why SoftwareOne?

SoftwareOne and Crayon have come together to form a global, AI-powered software and cloud solutions provider with a bold vision for the future. With a footprint in over 70 countries and a diverse team of 13,000+ professionals, we offer unparalleled opportunities for talent to grow, make an impact, and shape the future of technology. At the heart of our business is our people. We empower our teams to work across borders, innovate fearlessly, and continuously develop their skills through world-class learning and development programs. Whether you're passionate about cloud, software, data, AI, or building meaningful client relationships, you’ll find a place to thrive here. Join us and be part of a purpose-driven culture where your ideas matter, your growth is supported, and your career can go global.

Accommodations

SoftwareOne welcomes applicants from all backgrounds and abilities to apply. If you require reasonable adjustments at any point during the recruitment process, email us at reasonable.accommodations@softwareone.com. Please include the role for which you are applying and your country location. Someone from our organization that is not part of the decision-making process will be in touch to discuss your specific needs and we will make every effort to accommodate you. Any information shared will be stored securely and treated in the strictest of confidence in line with GDPR. At SoftwareOne, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Additionally, we encourage experienced individuals that have taken an intentional career break and are now prepared to return to work to explore our SOAR program.