Senior AWS Platform Engineer

Role Title: Senior AWS Platform Engineer (LZA & Networking Specialism)

Duration: contract to run until 31/03/2027

Location: Hybrid working. Onsite once every 2 months either in London/Manchester

Rate: up to £565.80 p/d Umbrella inside IR35

Clearance required: Active SC Clearance held with a government agency

Role purpose / summary

We are seeking a highly skilled Platform Engineer with deep expertise in AWS Landing Zone Accelerator (LZA) and network architecture. This role will focus on designing, implementing, and maintaining secure, scalable, and compliant cloud environments that form the foundation of our enterprise platform strategy. Leveraging your expertise in cloud technologies and best practices, you will work closely with tenants to architect, implement, and optimise solutions. You will collaborate with cross-functional teams to drive innovation and deliver exceptional value to our customers.

About you

You’ll be passionate about new technology and automation and experienced in being part of an Engineering

Team and Agile and DevOps best practices. You’ll also be able to talk to us about your:

• Knowledge of continuous integration and deployment practices
• Ability to collaborate with people of all levels of technical ability
• Understanding of industry best practices
• Team player
• Pro active

Responsibilities

AWS Landing Zone Design & Implementation:

• Deploy and configure AWS Landing Zone Accelerator to establish multi-account governance and security baselines.
• Implement organizational policies, guardrails, and compliance controls using AWS Control Tower and LZA.
• Automate account provisioning and configuration for consistent cloud adoption.

Networking Architecture:

• Design and manage AWS networking solutions, including VPCs, Transit Gateways, PrivateLink, and hybrid connectivity.
• Implement secure and resilient network topologies for multi-region and multi-account environments.
• Optimize network performance and cost while ensuring compliance with security standards.

Automation & Infrastructure as Code:

• Develop and maintain Infrastructure as Code (IaC) using Terraform or AWS CDK for Landing Zone and networking components.
• Automate deployment pipelines for platform services and configurations.
• Integrate networking and governance controls into CI/CD workflows.

Security & Compliance:

• Apply AWS security best practices for identity, access management, and network segmentation.
• Ensure compliance with organizational and regulatory requirements (e.g., ISO, NIST, CIS benchmarks).
• Implement monitoring and alerting for network and governance health.

Collaboration & Enablement:

• Partner with cloud engineering and security teams to embed Landing Zone and networking best practices.
• Provide documentation and training for platform usage and governance.
• Act as a subject matter expert for AWS networking and Landing Zone architecture.

Skills

• Platform Engineering: Proficiency in designing and implementing scalable, resilient, and secure cloud platforms.
• Cloud Organisation Management: Strong hands-on experience with AWS Landing Zone Accelerator and AWS Control Tower.
• Networking: Expertise in AWS networking services (VPC, Transit Gateway, Direct Connect, PrivateLink).
• Automation: Experience with infrastructure-as-code (IaC) practices, automation tools (e.g., Terraform, Ansible) and scripting languages (e.g. Python, Ruby).
• Container Orchestration: Knowledge of container orchestration platforms (e.g., Kubernetes) and their managed counterparts (e.g., EKS, AKS, GKE).
• Public Cloud Expertise: Understanding of cloud services, architecture, and best practices in one or more major public cloud providers (AWS, Azure, GCP).
• DevOps Practices: Strong experience with GitHub CI/CD pipelines, version control systems, and containerisation technologies (e.g., Docker).

Experience

• Project Leadership: Demonstrated experience delivering cloud migration, optimisation, or transformation projects.
• Client-Facing Experience: Proven track record of engaging with clients, understanding their requirements, and delivering solutions that exceed expectations.
• Team Collaboration: Ability to work effectively in cross-functional teams, communicate technical concepts to non-technical stakeholders, and drive consensus.
• Continuous Learning: Commitment to staying abreast of industry trends, participating in professional development activities, and obtaining relevant certifications.

Qualifications

Certification in relevant cloud technologies (AWS, Azure, GCP) at an associate level is highly desirable, e.g:

• AWS Certified: Solutions Architect Associate
• AWS Certified: Solutions Architect Professional

Certification in Kubernetes administration is desirable:

• Certified Kubernetes Administrator (CKA)
• Certified Kubernetes

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!