AWS Engineer

Job Function: Services The role:

• Do you want to design and implement scalable, secure, and cost-effective solutions on AWS and influence the organization's cloud architecture and strategy?
• Are you interested in a role where you combine deep technical expertise with stakeholder engagement, lead architectural decisions, and mentor others?
• Are you interested in becoming part of a leading global provider of software and cloud solutions that helps organizations optimize technology and drive digital transformation?

Practical Information
Location: Prague, Czech Republic | Leader: Cloud Services Lead | Working Model:Hybrid | Job Type: Full time | Visa: Valid work permit for the Czech Republic | Language requirements: Fluent/professional Czech (written and spoken), communicative English

Join the Cloud Platform team responsible for building and governing a centralized AWS Landing Zone and multi-account platform for a large banking group. The role focuses on designing, implementing, and enforcing cloud governance, security guardrails, networking foundations, and self-service account provisioning capabilities used by internal application teams.

Key Responsibilities

• Build and evolve AWS Landing Zone and AWS Organization structures across multiple business entities and Organizational Units (OUs).
• Design and implement multi-account AWS environments at enterprise scale.
• Develop and maintain Terraform modules and Infrastructure-as-Code automation.
• Build Account Vending and Account Factory capabilities for self-service account provisioning.
• Implement governance guardrails using SCPs, Control Tower controls and resource-based policies.
• Design IAM strategy including ABAC (Attribute-Based Assess Control), IAM Roles, Permission Sets, Permission Boundaries and IAM Identity Center.
• Create secure networking foundations, including Hub-Spoke architectures, Transit Gateway, VPC Endpoints, Direct Connect, and hybrid connectivity between on-premises datacenters and AWS.
• Build security baselines including CloudTrail, GuardDuty, logging, monitoring and service hardening.
• Define and enforce approved service catalog and cloud standards consumed by internal application teams.

What we need to see from you:

• Practical experience with AWS Organizations.
• Real-world experience designing OU structures and enterprise landing zones.
• Hands-on implementation of SCPs, Control Tower and governance controls.
• Experience operating large multi-account AWS environments.
• Expert Terraform knowledge, TF modules design and lifecycle management.
• GitHub and GitHub Actions automation.
• CI/CD implementation for platform services.
• Direct Connect.
• Cross-account networking.
• VPC endpoints.
• Hybrid DNS setup between on-premises datacenters and AWS.
• IAM, ABAC (Attribute-Based Access Controls) and enterprise access models.
• Permission Sets and Permission Boundaries.
• Encryption using BYOK/CMK.
• CloudTrail, GuardDuty and AWS security hardening.

At SoftwareOne Czech Republic, we believe work should fit around life - not the other way around. Here’s what you can look forward to when joining our team:* Plenty of time off – 25 vacation days plus extra days for long service (up to 5 more)

• Flexibility that works – enjoy our hybrid setup, combining home office and time in our Prague space
• Fun & connection – annual team events, rooftop barbecues, and casual monthly breakfasts with your teammates
• Wellbeing support – a Multisport card, free weekly physiotherapy sessions in the office, and coffee & snacks always ready
• Commuting made easy – we cover your annual public transport pass
• Continuous learning – language classes and professional certifications aligned with your growth path

Why SoftwareOne?:

SoftwareOne is a global provider of software and cloud solutions. With a presence in over 70 countries and more than 13,000 professionals, we help organizations optimize software investments, modernize applications, and unlock the value of cloud, data, and AI.

Our people are at the core of everything we do. We enable collaboration across borders, continuous learning, and opportunities to grow in a fast-evolving technology landscape. Whether your focus is on technology, customer success, or business operations, your ideas matter, and your contributions make a difference.

Join a global team where you can build your skills, work with leading technologies, and make a real impact for our customers.
Accommodations:
SoftwareOne welcomes applicants from all backgrounds and abilities to apply. If you require reasonable adjustments at any point during the recruitment process, email us at reasonable.accommodations@softwareone.com.
Please include the role for which you are applying and your country location. Someone from our organization that is not part of the decision-making process will be in touch to discuss your specific needs and we will make every effort to accommodate you. Any information shared will be stored securely and treated in the strictest of confidence in line with GDPR.

At SoftwareOne, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Additionally, we encourage experienced individuals that have taken an intentional career break and are now prepared to return to work to explore our SOAR program.