About the Role APEX Fintech's AWS Workspaces platform is a production-grade, multi-region AWS serverless system that automates the full lifecycle of Amazon Workspaces virtual desktops for a multi-tenant VDI program spanning hundreds of active desktops. We're hiring an AWS Cloud Engineer with 2+ years of hands-on AWS experience to help keep that platform running day to day - working alongside senior engineers on our Terraform/Ansible codebase, triaging production issues across the serverless stack, and supporting VDI operations. It's a hands-on learning, building, and supporting role: you'll gain production AWS experience on a live platform with senior engineers guiding you through incidents and architecture decisions.
Duties & Responsibilities - Assist engineering team with platform maintenance, IaC updates, and day-to-day operational tasks.
- Help triage and troubleshoot production issues under guidance, tracing basic failures across Lambda, SQS, DynamoDB, SNS, and CloudWatch Logs.
- Support day-to-day VDI operations: image builds, bundle management, directory configuration, client connectivity, and user-facing troubleshooting.
- Bridge the gap between infrastructure automation and end-user desktop experience.
- Support the Datadog monitoring setup for the AWS VDI stack - assisting with dashboards, alerts, and basic metrics/log configuration.
Education and/or Experience - 2+ years of hands-on AWS experience in production environment.
- 2+ years of experience with AWS Systems Manager (SSM) Parameter Store for configuration management.
- 2+ years of experience working with Terraform and Ansible in a production environment.
- 2+ years of experience working with core AWS services such as Lambda, S3, IAM, DynamoDB, and CloudWatch.
- Understanding AWS Step Functions concepts (states, Task, Choice, Wait); hands-on experience is a plus.
- Exposure to API Gateway and basic REST API concepts.
- Familiarity with AWS SNS/SQS messaging concepts.
- Must have prior knowledge of observability practices (CloudWatch, Datadog) and AWS IAM fundamentals.
- Strong troubleshooting mindset and eagerness to learn Active Directory / SSO concepts for VDI environments.
- Required: hands-on experience with macOS, Linux, and shell scripting.
- Exposure to disaster recovery (DR) concepts and multi-region failover for critical workloads.
- Familiarity with AWS Secrets Manager for credential and configuration management.
Ways to Stand Out - Exposure to VPC networking concepts (subnets, route tables, NAT Gateway, security groups, transit gateway).
- Familiarity with Route53 and API Gateway custom domains.
- Experience with GitHub Actions or other CI/CD pipelines.
- Interest in cloud cost optimization.
- Exposure to infrastructure security scanning tools (Checkov, tfsec).
- Basic awareness of security frameworks and controls (CIS benchmarks, NIST).
- Automation scripting experience (Python, Bash, or PowerShell) for repetitive operational tasks.
- Experience with endpoint/device management tools such as Microsoft Intune or Kandji for VDI and endpoint provisioning.
- Strong communication skills - able to explain technical decisions to both engineering peers and non-technical stakeholders.
Other Preferred Qualifications - AWS Certified Solutions Architect - Associate.
- AWS Certified Developer - Associate.
- Basic familiarity with boto3 for scripting AWS interactions.
- Exposure to unit testing practices for Lambda functions (moto, pytest-mock).
- Interest in fintech or financial services, and familiarity with basic compliance concepts (e.g., SOC 2, data privacy).
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
Our RewardsWe offer a robust package of employee perks and benefits, including healthcare benefits (medical, dental and vision, EAP), competitive PTO, 401k match, parental leave, and HSA contribution match. We also provide our employees with a paid subscription to the Calm app and offer generous external learning and tuition reimbursement benefits. At AFS, we offer a hybrid work schedule for most roles that allows employees to have the flexibility of working from home and one of our primary offices.
