AWS Cloud Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and implement secure, scalable, and highly reliable solutions on AWS, including AWS GovCloud (US).

• Spearhead the transition of the current GCP-based platform to AWS.

• Align GCP services and NIST SP 800-53 controls with their AWS counterparts, documenting control inheritance and ATO evidence.

• Refactor and enhance Terraform modules and CI/CD pipelines for AWS deployments.

• Facilitate technical discovery sessions and create solution architectures tailored to customer needs.

• Engineer secure networking solutions utilizing Amazon VPC, Transit Gateway, security groups, network ACLs, AWS Network Firewall, Route 53, Elastic Load Balancing, NAT Gateways, VPC endpoints, PrivateLink, Direct Connect, and Site-to-Site VPN.

• Deploy and manage AWS services including EC2, EKS, ECS, S3, RDS, Secrets Manager, KMS, CloudWatch, CloudTrail, Config, Security Hub, GuardDuty, and others.

• Implement IAM, network segmentation, encryption, key management, centralized logging, monitoring, vulnerability management, and secure configuration controls.

• Construct and support containerized platforms using EKS and ECS.

• Develop Infrastructure as Code with Terraform or similar frameworks.

• Design and implement CI/CD pipelines for both infrastructure and application deployments.

• Automate infrastructure provisioning, configuration management, and operational tasks.

• Create technical documentation, architecture diagrams, and implementation guides.

• Diagnose intricate issues related to infrastructure, networking, security, and applications.

• Assist in security assessments, ATO, continuous monitoring, and POA&M remediation activities, including the collection and maintenance of technical evidence.

• Provide technical guidance and mentorship to junior engineers.

• Collaborate with customers, project managers, and engineering teams throughout the project lifecycle.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field.

• Over 7 years of experience in designing and implementing enterprise IT infrastructure.

• More than 4 years of practical AWS architecture experience.

• In-depth knowledge of AWS architecture, including IAM roles and policies, AWS Organizations, Service Control Policies, AWS Control Tower multi-account strategy, Amazon VPC and Transit Gateway, network security, EC2, EKS, S3, CloudWatch and CloudTrail, AWS KMS, and Secrets Manager.

• Demonstrated hands-on experience in developing and customizing AWS landing zone templates using AWS Control Tower, Landing Zone Accelerator (LZA) on AWS, Account Factory for Terraform (AFT), or Customizations for Control Tower (CfCT).

• Strong practical experience with Terraform or similar Infrastructure as Code technologies.

• Experience in implementing CI/CD pipelines utilizing GitHub Actions, GitLab CI, Jenkins, AWS CodeBuild, and AWS CodePipeline.

• Proficient in Linux administration and troubleshooting.

• Experience in scripting and automation with Python, Bash, or comparable technologies.

• Hands-on experience with systems governed by FedRAMP, FISMA, DoD RMF, NIST SP 800-53, or similar federal cybersecurity frameworks.

• Familiarity with containers and orchestration technologies, including Docker, Amazon EKS, and Amazon ECS, along with container security best practices.

• Knowledge of security control implementation, assessment evidence, continuous monitoring, vulnerability management, and remediation processes.

• Strong grasp of cloud security principles, including IAM, network segmentation, encryption, key management, logging, monitoring, vulnerability management, and secure configuration.

• Ability to create clear technical documentation and communicate effectively with engineering, security, compliance, and customer stakeholders.

• Working knowledge of Google Cloud Platform (GCP), including GKE, Shared VPC, Cloud IAM, Cloud KMS, and Security Command Center.

• Advanced experience with Kubernetes, including Red Hat OpenShift, container networking (CNI), service mesh technologies, and policy enforcement.

• Experience with multi-cloud implementations across AWS and GCP and/or Azure.

• AWS Certified Solutions Architect – Professional, AWS Certified Security – Specialty, Certified Kubernetes Administrator (CKA), HashiCorp Terraform Associate, or security certifications such as CISSP, CCSP, or Security+.

🏝️ Benefits

• Health, Dental, and Vision insurance.

• 401(k) matching program.

• Paid Time Off.

• Short-Term Disability, Long-Term Disability, and Life Insurance.

• Referral Bonuses.

• Professional development reimbursement.

• Parental leave.