Cloud Platform Engineer – AWS in Suffolk

WTW is seeking a Cloud Platform Engineer - AWS to design, build, and operate the enterprise-scale Amazon Web Services (AWS) compute platform that supports our global business services. In this role, you will deliver secure, scalable, and highly automated cloud services through Infrastructure as Code, platform standards, governance controls, and operational excellence practices. You will join a platform engineering team that runs a mature multi-cloud environment, partnering closely with Azure platform and application teams to deliver consistent outcomes across clouds. The ideal candidate brings deep, hands-on AWS expertise, strong automation skills, and a security-first mindset. Working experience with Microsoft Azure is a strong advantage.

The role offers a remote working arrangement and is open to candidates across the UK, with London or Ipswich serving as the primary office locations.

The Role:

• Engineer and operate a large-scale, multi-account AWS environment governed through AWS Organizations, organizational units (OUs), and AWS Control Tower.
• Design, implement, and manage AWS compute infrastructure, including Amazon EC2, Auto Scaling groups, Elastic Load Balancing, Amazon EBS, and standardized machine images (AMIs) built with EC2 Image Builder.
• Partner with network and security teams on foundational services such as Amazon VPC, AWS Transit Gateway, security groups, and Amazon Route 53 to ensure secure, reliable workload connectivity.
• Implement and maintain cloud security services, including AWS Security Hub, Amazon GuardDuty, Amazon Inspector, AWS KMS, AWS Secrets Manager, and IAM roles and instance profiles, while driving vulnerability remediation and platform hardening.
• Automate provisioning, configuration, and ongoing support using Terraform, AWS CloudFormation or AWS CDK, the AWS CLI, Python, and PowerShell.
• Manage server fleets at scale with AWS Systems Manager, including Patch Manager, State Manager, Session Manager, and Run Command.
• Enforce governance standards across the AWS estate, including landing zone design, Service Control Policies (SCPs), AWS Config rules, IAM and IAM Identity Center access models, tagging policies, account vending, and compliance controls.
• Ensure the resilience and recoverability of compute workloads through high-availability design, AWS Backup, and disaster recovery solutions such as AWS Elastic Disaster Recovery.
• Optimize cloud resources for performance, cost, and availability using Amazon CloudWatch, AWS CloudTrail, AWS Cost Explorer, AWS Budgets, AWS Compute Optimizer, and Savings Plans.
• Collaborate with DevOps and application teams to support CI/CD pipelines, containerized workloads (Amazon ECS, Amazon EKS, AWS Fargate), and serverless and managed services such as AWS Lambda.
• Promote multi-cloud consistency by aligning AWS standards, tooling, and operating practices with the existing Azure platform where appropriate.
• Resolve support tickets and troubleshoot complex platform issues promptly, performing root cause analysis to prevent recurrence.
• Document processes, procedures, and infrastructure designs to promote knowledge sharing and continuous improvement.
• Stay current with AWS service releases and industry trends and recommend improvements to the platform roadmap.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
• Demonstrated expertise in cloud infrastructure, with practical experience building and operating production workloads within AWS.
• Strong understanding of IaaS server management on AWS, including high availability, monitoring, backup, and disaster recovery.
• Solid knowledge of Windows Server security baselines (e.g., CIS Benchmarks) and configuration management practices.
• Experience with Terraform in a production environment.
• Working knowledge of AWS identity and governance, including IAM, AWS Organizations, and Service Control Policies.
• Understanding of CI/CD tools and concepts (e.g., GitHub Actions, Azure DevOps, AWS CodePipeline).
• Proficiency in scripting with Python and/or PowerShell.
• Hands-on experience with Microsoft Azure (e.g., virtual machines, Management Groups, Azure Policy, Defender for Cloud) and with operating in multi-cloud environments.
• Experience with GitHub Enterprise.
• Familiarity with additional Infrastructure as Code tools, such as AWS CloudFormation, AWS CDK, Bicep, or ARM templates.
• Experience managing hybrid and on-premises servers through AWS Systems Manager, or through Azure Arc and OSConfig.
• Experience with vulnerability management programs and tooling.
• Experience administering Linux servers in AWS.
• Basic understanding of AI/ML operational concepts, model lifecycle management, and supporting cloud infrastructure (e.g., Amazon SageMaker, Amazon Bedrock).
• Experience working within DevOps and Agile delivery models.
• AWS certifications such as AWS Certified CloudOps Engineer – Associate (formerly SysOps Administrator – Associate), Solutions Architect – Associate or Professional, DevOps Engineer – Professional, or Security – Specialty. Azure certifications (e.g., AZ-104, AZ-305) are a plus.

Preferred Experience, Skills, and Qualifications:

• Ability to influence technical direction across globally distributed teams.
• Strong analytical and troubleshooting skills, with a methodical approach to complex problems.
• Clear, effective communication with both technical and non-technical stakeholders.
• Commitment to continuous improvement and operational excellence.
• Sound judgment in balancing governance, security, reliability, and delivery speed.

What we offer:

Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company. We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you.

Equal Opportunity Employer

We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com