Design and lead secure, highly available cloud architectures primarily on AWS
Architect identity and access management solutions, including federated authentication, multi-factor authentication, and customer identity and access management (CIAM)
Drive best practices in designing event-driven, serverless applications with AWS Lambda, API Gateway, EventBridge, SQS and other AWS Services
Design scalable data engineering platforms for ingestion, normalization, enrichment, and API-driven data integration leveraging AWS services such as RDS, DynamoDB, S3, Glue, Athena and ETL frameworks
Plan and govern integration strategies for cloud contact center solutions like Amazon Connect with backend systems
Enforce cloud security measures focusing on encryption, audit logging, GDPR/CCPA/FedRAMP compliance, and the principle of least privilege via IAM
Define and implement Infrastructure as Code (IaC) using Terraform and AWS CloudFormation to automate provisioning and configuration
Lead development and maintenance of reusable IaC modules and best practices for scalability, security, and compliance
Collaborate with DevOps teams to integrate IaC pipelines into CI/CD workflows for repeatable and auditable deployments
Review and enforce standards related to IaC code quality, security policies, and version control
Collaborate with cross-functional teams to translate business needs into secure, scalable cloud and data solutions
Evaluate emerging AWS cloud technologies to improve architecture and operational efficiency
Produce architecture documentation including design decisions, tradeoffs, and security controls
Communicate complex technical concepts effectively to technical and non-technical stakeholders
Requirements
Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience)
10+ years of professional experience in cloud architecture with deep AWS expertise
Relevant AWS certifications (Solutions Architect (Mandatory), Security Specialty(nice to have))
Proven experience designing identity management and secure access using AWS Cognito, IAM, and federation protocols (SAML, OIDC, OAuth2)
Strong skills in serverless, event-driven architecture with AWS Lambda, API Gateway, SQS, and EventBridge
Experience building and architecting data engineering platforms based on relational (PostgreSQL/Aurora RDS), NoSQL (DynamoDB), caching (ElastiCache/Redis), and ETL pipelines
Knowledge of cloud contact center solutions, ideally Amazon Connect, including integration strategies
Expertise in cloud security and compliance frameworks, encryption, data governance, and auditability
Hands-on experience with Terraform and CloudFormation for Infrastructure as Code at scale
Proven ability to implement and govern CI/CD pipelines involving IaC deployments and automated testing