Cloud Engineer, AWS – CDK, Serverless

Siteup

. Inventory the CDK estate and build a modernization plan .

Posted 9/18/2026contractRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in AWS infrastructure-as-code, particularly with AWS CDK in TypeScript, and a solid understanding of serverless architecture. Proficient in CI/CD pipeline development and observability tools, with strong communication skills for collaboration with non-technical stakeholders.

Highest-signal resume keywords

AWS CDK ExperienceInfrastructure-as-Code ExpertiseServerless Architecture KnowledgeCI/CD Pipeline DevelopmentFluent English Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWSTypeScriptCloudFormationTerraformLambdaAPI GatewaySQSKMSNode.js MigrationDrift Detection

Soft Skills

Clear CommunicationCollaboration

Tools & Technologies

GitHub ActionsX-RayCloudWatchParameter StoreServiceNow

Industry Keywords

Infrastructure-as-CodeServerlessObservabilitySecurity ServicesMutual-TLS

Tech Stack

Tools & technologies

AWSNode.jsRayServiceNowTerraformTypeScript

About the role

Key responsibilities & impact

Inventory the CDK estate and build a modernization plan
Upgrade the CDK library/CLI and replace deprecated constructs
Move hardcoded context into per-environment configuration
Consolidate duplicated stacks into shared constructs while preserving resource identity
Map logical IDs before and after refactoring and confirm resources will not be replaced
Run the library upgrade and stack refactor as two separate, ordered deployments
Test the rollback path in development and test environments
Migrate six Lambda functions from Node 18 to Node 24
Close an open PII logging finding and regression-test each Lambda function
Re-verify WAF, the mTLS domain and truststore, X-Ray tracing, and upstream timeouts
Work with the customer's POS team across six external callers
Build dev/test/prod deployment pipelines with OIDC federation, approval gates, and a ServiceNow change step
Add CDK assertion tests, drift detection, and API access log retention
Publish the SQS queue ARN and KMS key ARN via Parameter Store
Grant send permission to the downstream Terraform-managed system
Align naming, tagging, and documentation with the customer's internal standards
Document identity-preservation decisions for the next engineer

Requirements

What you’ll need

5+ years with AWS, including 3+ years working in infrastructure-as-code
Hands-on AWS CDK experience in TypeScript — construct trees, logical ID derivation, and what happens when a construct path changes
Real experience with CloudFormation resource identity: stack refactoring, logical ID overrides, cdk diff against deployed state, drift detection
Working Terraform knowledge — comfortable operating across the CDK/Terraform boundary
Solid AWS serverless background: Lambda, API Gateway (REST), SQS and DLQs, Parameter Store, KMS, Secrets Manager
Experience with AWS edge and security services — WAF web ACLs, mutual-TLS custom domains and truststores, cross-account/cross-boundary IAM
Practical experience migrating Nodejs runtimes (e.g. Node 18 → 24), including dependency and deprecation handling
CI/CD pipeline experience with OIDC federation and approval gates (GitHub Actions or equivalent)
Working knowledge of observability tools — X-Ray, CloudWatch metrics and alarms, log retention
Comfortable communicating clearly with non-engineers, and working well when parts of the scope are still being figured out
Fluent English (C1 level) for daily communication with the client

Benefits

Comp & perks

Hourly contractor engagement
100% remote work
Estimated duration of 6–8 weeks