AWS Cloud Principle Engineer

Platform engineering

· Build shared services, middleware, templates and reusable NuGet SDKs using C#, modern .NET and ASP.NET Core.

· Implement authentication integration, BFF session management, token lifecycle controls and tenant-aware, resource-level authorization patterns.

· Establish API standards for validation, versioning, structured errors, idempotency, configuration and service-toservice integration.

· Develop reusable patterns for PostgreSQL access, Redis caching/session storage, observability and resilient messaging as appropriate.

· Contribute to AWS-based deployments, including API Gateway, ECS/Fargate, Aurora/RDS PostgreSQL, ElastiCache, SQS and EventBridge where relevant.

· Publish packages through Azure DevOps Artifacts and support domain teams in adoption without unnecessary coupling.

· Develop a modular Angular and TypeScript application shell with shared navigation, routing, lifecycle and errorhandling capabilities.

· Build versioned frontend SDKs, shared components, application templates and documented integration contracts.

· Support independently developed and deployed domain applications, with appropriate isolation, lazy loading, accessibility and performance practices.

· Integrate identity and session flows with enterprise OIDC/OAuth 2.0 providers and backend-for-frontend (BFF) services; support permission-aware UI while keeping authorization enforcement on the server.

· Publish and maintain frontend packages through Azure DevOps Artifacts and support consuming application teams.

AI-assisted development and quality

· Use Claude Code or comparable AI coding assistants for design exploration, implementation, refactoring, testing and documentation.

· Apply structured, specification-driven AI-assisted delivery approaches, including AWS AI-DLC 2.0; turn requirements into reviewable plans and acceptance criteria.

· Review and verify AI-generated code for security, correctness, maintainability and compliance with platform standards.

· Contribute to Azure DevOps CI/CD pipelines, automated tests, peer reviews and engineering quality gates.

Required qualifications

· 5+ years of professional backend / frontend engineering experience, or equivalent demonstrated capability.

· Strong C#, modern .NET, ASP.NET Core and secure REST API development experience.

· Solid knowledge of OAuth 2.0, OIDC, application security, authentication and authorization.

· Experience with SQL/relational databases, transactions, asynchronous programming and failure-resistant service design.

· Experience with AWS or comparable cloud platforms, automated testing, Git and CI/CD.

· Ability to contribute to architecture and implement production-grade components independently.

· Strong Angular, TypeScript, JavaScript, HTML and CSS experience; expertise in SPA architecture, modularity, routing and state management.

· Experience designing reusable libraries, SDKs or component systems used by multiple teams.

· Understanding of OAuth 2.0, OIDC, secure browser sessions, API integration and common frontend threats such as XSS and CSRF.

· Experience with automated unit/component/end-to-end testing, Git and CI/CD.

Preferred qualifications

· AWS ECS/Fargate, API Gateway, Aurora PostgreSQL, ElastiCache, SQS, EventBridge, Secrets Manager and CloudWatch.

· BFF patterns, enterprise federation (Entra ID/PingFederate), Redis, multitenant authorization and OpenTelemetry.

· AWS web delivery experience (such as CloudFront, S3 and API Gateway); Azure DevOps Repos, Pipelines and Artifacts.

· Experience with enterprise application shells, micro-frontends, BFF integration, Entra ID or PingFederate.

· Demonstrable hands-on use of Claude Code, GitHub Copilot or similar AI tools for substantial engineering tasks; familiarity with AWS AI-DLC 2.0.

Expected deliverables

· Working application-shell foundation and documented integration patterns.

· Reusable, versioned frontend SDKs and reference application templates.

· Automated test coverage, CI/CD integration and onboarding documentation for domain teams.

· Production-ready shared backend components and versioned .NET SDKs.

· Reference services, secure authentication/session and authorization integration patterns.

· Automated tests, pipeline integration, operational instrumentation and adoption documentation.