Cloud Engineer – AWS Foundation Platform

Stellantis is seeking a skilled and motivated Cloud Engineer to reinforce and support the design, implementation, and continuous improvement of our AWS Foundation Product — an AWS Landing Zone governing 1,500+ AWS accounts distributed across all Stellantis business functions and geographies (NAFTA, LATAM, Europe, EMEA, and APAC). As a Cloud Engineer, you will collaborate with cross-functional teams — including SecOps, FinOps, platform consumers, and global infrastructure teams — to build reusable platform components, drive DevOps maturity, and operate the AWS organizational layer as a product. AI tools are an integral part of daily engineering practice in this team.

Key Responsibilities:

• Design and implement end-to-end automation of the AWS account lifecycle — provisioning, configuration, baselining, and decommissioning — achieving zero-touch operations at scale using Lambda, Step Functions, and EventBridge..
• Build and maintain a self-service cloud platform (account vending machine, network factory, identity federation) enabling application teams to onboard and operate autonomously, backed by an Internal Developer Portal with AI-powered capabilities.
• Own Infrastructure as Code (IaC) delivery pipelines across 1,500+ accounts using Terraform, enforcing GitOps practices, policy-as-code, drift detection, and automated testing at every stage.
• Define and operate SLOs, Error Budgets, and an observability stack with AI-assisted anomaly detection across provisioning, cost, network, and security signals — enabling predictive operations rather than reactive firefighting.
• Manage AWS Control Tower, Organizations, and Service Control Policies (SCPs), enforcing governance, least-privilege IAM, and compliance guardrails with automated self-healing when drift is detected.
• Apply AI tools as a standard daily practice for IaC authoring, automation scripting, test generation, incident analysis, and runbook maintenance — maintaining full engineering ownership of all generated outputs.
• Lead post-mortems and translate every incident into systemic engineering improvements; maintain runbooks and playbooks as versioned, executable artifacts.