Job description
This is a remote position.
Job Title: AWS Cloud Infrastructure Architect Location: Remote Duration: Full-Time Clearance: IRS MBI Required We are seeking an experienced AWS Cloud Architect to design, implement, and manage our organization's cloud infrastructure on Amazon Web Services. This role will be responsible for establishing and maintaining our AWS environment, including account structure, networking, security, and governance frameworks. Key Responsibilities AWS Account & Organization Management
Design and implement AWS account structure using AWS Organizations
Create and manage Organizational Units (OUs) based on business requirements and best practices
Establish account governance policies and standards
Implement consolidated billing and cost allocation strategies
Deploy and manage AWS Control Tower for automated account provisioning and governance
Implement Landing Zone Architecture (LZA) for scalable, secure multi-account environments
Network Architecture & Connectivity
Design and deploy Virtual Private Clouds (VPCs) across multiple regions
Configure and manage VPN connections (Site-to-Site VPN and Client VPN)
Implement AWS Direct Connect for hybrid cloud connectivity
Design network segmentation strategies using subnets, route tables, and network ACLs
Configure Transit Gateway for multi-VPC connectivity
Manage DNS using Route 53
Architect network solutions for AWS GovCloud environments
Identity & Access Management (IAM)
Design and implement IAM policies, roles, and permission boundaries
Establish identity federation with corporate identity providers
Implement least privilege access principles
Create and manage service control policies (SCPs) at the organization level
Configure multi-factor authentication (MFA) requirements
Develop IAM governance and compliance frameworks
Security & Compliance
Design and implement security policies across the organization
Configure AWS Security Hub, GuardDuty, and AWS Config
Implement encryption strategies for data at rest and in transit
Establish security monitoring and incident response procedures
Ensure compliance with industry standards (SOC 2, ISO 27001, HIPAA, etc.)
Maintain FedRAMP compliance requirements and controls
Design and implement security architectures for AWS GovCloud (US) regions
Conduct security assessments and vulnerability management
Implement AWS WAF and Shield for application protection
Additional Responsibilities
Create infrastructure as code using AWS CloudFormation or Terraform
Develop and maintain architectural documentation and diagrams
Provide technical guidance and mentorship to engineering teams
Participate in disaster recovery planning and testing
Optimize cloud costs and resource utilization
Technical Skills
5+ years of experience in cloud architecture, with 3+ years specifically on AWS
Deep understanding of AWS Organizations and multi-account strategies
Hands-on experience with AWS Control Tower for account orchestration and governance
Proficiency in Landing Zone Architecture (LZA) design and implementation
Experience working with AWS GovCloud (US) environments
Knowledge of FedRAMP compliance requirements, controls, and authorization processes
Expert knowledge of AWS networking services (VPC, VPN, Direct Connect, Transit Gateway)
Strong expertise in IAM, including policy design and identity federation
Proven experience implementing security best practices and compliance frameworks
Proficiency with infrastructure as code tools (CloudFormation, Terraform, CDK)
Experience with AWS security services (Security Hub, GuardDuty, Config, CloudTrail)
Certifications (Preferred)
AWS Certified Solutions Architect – Professional
AWS Certified Security – Specialty
AWS Certified Advanced Networking - Specialty
Additional AWS certifications are a plus
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.