AWS Cloud Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and execute secure, scalable, and highly available AWS solutions, including AWS GovCloud (US).

• Lead the transition of the current GCP-based platform to AWS.

• Align GCP services and NIST SP 800-53 controls with their AWS counterparts, documenting control inheritance and ATO evidence.

• Refactor and enhance Terraform modules and CI/CD pipelines for AWS deployments.

• Facilitate technical discovery sessions and create solution architectures that align with customer needs.

• Create secure networking configurations utilizing Amazon VPC, Transit Gateway, security groups, network ACLs, AWS Network Firewall, Route 53, Elastic Load Balancing, NAT Gateways, VPC endpoints, PrivateLink, Direct Connect, and Site-to-Site VPN.

• Deploy and manage EC2, EKS, ECS, S3, RDS, Secrets Manager, KMS, CloudWatch, CloudTrail, Config, Security Hub, GuardDuty, and other AWS services.

• Implement IAM, network segmentation, encryption, key management, centralized logging, monitoring, vulnerability management, and secure configuration controls.

• Build and maintain containerized platforms using EKS and ECS.

• Develop Infrastructure as Code using Terraform or similar frameworks.

• Design and implement CI/CD pipelines for both infrastructure and application deployments.

• Automate infrastructure provisioning, configuration management, and operational tasks.

• Create technical documentation, architecture diagrams, and implementation guides.

• Troubleshoot intricate infrastructure, networking, security, and application issues.

• Assist with security assessments, ATO, continuous monitoring, and remediation activities, which include the collection and maintenance of technical evidence.

• Provide technical leadership and mentor junior engineers.

• Collaborate with customers, project managers, and engineering teams throughout all phases of project lifecycles.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent experience.

• Over 7 years of experience in designing and implementing enterprise IT infrastructure.

• More than 4 years of hands-on experience in AWS architecture.

• Strong understanding of AWS architecture, including IAM roles and policies, AWS Organizations, Service Control Policies, AWS Control Tower multi-account strategy, Amazon VPC and Transit Gateway, network security, EC2, EKS, S3, CloudWatch, CloudTrail, AWS KMS, and Secrets Manager.

• Proven practical experience in developing and customizing AWS landing zone templates using AWS Control Tower, Landing Zone Accelerator (LZA) on AWS, Account Factory for Terraform (AFT), or Customizations for Control Tower (CfCT).

• Significant hands-on experience with Terraform or similar Infrastructure as Code technologies.

• Experience with CI/CD pipeline implementation using GitHub Actions, GitLab CI, Jenkins, AWS CodeBuild, and AWS CodePipeline.

• Strong Linux administration and troubleshooting capabilities.

• Proficiency in scripting and automation using Python, Bash, or similar technologies.

• Hands-on experience with systems governed by FedRAMP, FISMA, DoD RMF, NIST SP 800-53, or comparable federal cybersecurity frameworks.

• Practical experience with containers and orchestration, including Docker, Amazon EKS, and Amazon ECS, along with container security best practices.

• Understanding of security control implementation, assessment evidence, continuous monitoring, vulnerability management, and remediation processes.

• Comprehensive knowledge of cloud security concepts, including IAM, network segmentation, encryption, key management, logging, monitoring, vulnerability management, and secure configuration.

• Ability to generate clear technical documentation and communicate effectively with engineering, security, compliance, and customer stakeholders.

• Familiarity with Google Cloud Platform (GCP), including GKE, Shared VPC, Cloud IAM, Cloud KMS, and Security Command Center.

• Advanced experience with Kubernetes, including Red Hat OpenShift, container networking (CNI), service mesh technologies, and policy enforcement.

• Multi-cloud implementation experience across AWS and GCP and/or Azure.

• AWS Certified Solutions Architect – Professional, AWS Certified Security – Specialty, Certified Kubernetes Administrator (CKA), HashiCorp Terraform Associate, or security certifications such as CISSP, CCSP, or Security+.

🏝️ Benefits

• Health/Dental/Vision coverage.

• 401(k) matching.

• Paid Time Off.

• Short-Term/Long-Term Disability and Life Insurance.

• Referral Bonuses.

• Professional development reimbursement.

• Parental leave.