AWS Architect -- W2 Profile -- 100% Remote

Key Responsibilities

• Design, build, and manage AWS environments across DEV, TEST, UAT, PROD, and DR.
• Manage AWS accounts, service quotas, resource governance, tagging, cost optimization, and environment readiness.
• Implement VPC and spoke architectures, subnetting, routing, Cloud WAN, VPC endpoints, PrivateLink, DNS, and private connectivity.
• Coordinate integrations with corporate networks, firewalls, Netskope, on-premises systems, and shared AWS networking services.
• Build and support AWS services, including EC2, S3, RDS, MWAA, Lambda, ALB/NLB, Cognito, Route 53, Secrets Manager, and Systems Manager.
• Design IAM roles, trust relationships, permission policies, instance profiles, permission boundaries, and cross-account access.
• Implement KMS encryption, certificate management, secure S3 configurations, secrets management, vulnerability remediation, and compliance controls.
• Develop infrastructure automation using Terraform, AWS CloudFormation, AWS CLI, Python, PowerShell, and Bash.
• Build and maintain GitHub-based CI/CD pipelines for infrastructure and application deployments.
• Implement automated validation, security scanning, policy checks, approval gates, release controls, and rollback procedures.
• Configure CloudTrail, CloudWatch, VPC Flow Logs, AWS Config, SNS alarms, dashboards, and centralized monitoring.
• Support AWS MWAA/Airflow, RDS PostgreSQL, S3 landing zones, bastion services, and private application access.
• Troubleshoot IAM, KMS, DNS, routing, firewall, endpoint, Linux, EC2, database, and managed-service issues.
• Conduct architecture reviews, capacity planning, disaster recovery planning, cost optimization, and production-readiness assessments.
• Create architecture diagrams, operational procedures, support runbooks, compliance evidence, and recovery documentation.
• Participate in production support, incident response, root-cause analysis, change management, and continuous service improvement.

Required Qualifications

• 5+ years of hands-on experience in AWS Cloud Engineering, DevOps, Platform Engineering, or Cloud Security.
• Strong knowledge of AWS networking, IAM, KMS, S3, EC2, RDS, Lambda, CloudWatch, Systems Manager, and private service connectivity.
• Experience operating private, regulated, or enterprise AWS environments.
• Strong Infrastructure as Code experience with Terraform.
• Experience with GitHub Actions or comparable CI/CD platforms.
• Proficiency in AWS CLI, Linux, Python, PowerShell, and Bash scripting.
• Understanding of identity federation, SAML/OIDC, secrets management, certificates, encryption, and least-privilege access.
• Strong troubleshooting skills across cloud infrastructure, networking, security, applications, and on-premises environments.
• Experience with monitoring, incident response, change management, and production operations.

Preferred Qualifications

• AWS Solutions Architect, DevOps Engineer, Security, or Advanced Networking certification.
• Experience with AWS MWAA, Airflow, Cognito, RDS PostgreSQL, Network Firewall, Cloud WAN, Netskope, or Cloudera on AWS.
• Experience supporting healthcare, government, or other regulated workloads.
• AWS Cloud modernization and Teradata migration experience.

Mandatory Skills

AWS Cloud Architecture, Terraform, AWS Networking, IAM, KMS, EC2, S3, RDS, Lambda, CI/CD, GitHub Actions, AWS CLI, Python, Linux, Cloud Security, and Production Support.