AWS Cloud Infrastructure Architect with IRS MBI Clearance

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8159qk

ppbThis position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an AWS Cloud Infrastructure Architect with IRS MBI Clearance based in Italy. /b /ppThis role is responsible for designing and managing secure, scalable AWS cloud infrastructure across complex multi-account environments. You will shape cloud architecture spanning account governance, networking, identity and access management, security, and compliance. The position requires hands-on expertise with AWS Organizations, Control Tower, Landing Zone Architecture, and GovCloud environments. You will help establish resilient cloud foundations while supporting stringent regulatory and security requirements, including FedRAMP. Working closely with engineering and security teams, you will provide architectural guidance and help drive infrastructure best practices. The role also includes infrastructure automation, cost optimization, disaster recovery, and technical documentation. This is an opportunity to make a direct impact on the reliability, security, and scalability of a mission-critical cloud environment. /ph3Accountabilities /h3ul liDesign and implement AWS account structures using AWS Organizations, including Organizational Units aligned with business and technical requirements. /li liEstablish account governance policies, standards, consolidated billing, and cost allocation strategies. /li liDeploy and manage AWS Control Tower for automated account provisioning, governance, and organizational controls. /li liDesign and implement Landing Zone Architecture for secure, scalable, multi-account AWS environments. /li liArchitect and deploy multi-region VPC environments, including subnets, route tables, network ACLs, and network segmentation strategies. /li liConfigure and manage Site-to-Site VPN, Client VPN, AWS Direct Connect, and Transit Gateway connectivity. /li liDesign hybrid and multi-VPC networking solutions and manage DNS through Amazon Route 53. /li liArchitect network solutions for AWS GovCloud environments. /li liDesign and implement IAM policies, roles, permission boundaries, identity federation, and organization-level Service Control Policies.



/li liEstablish least-privilege access models and MFA requirements while maintaining IAM governance and compliance frameworks. /li liDevelop and implement organization-wide security policies, monitoring, and incident response procedures. /li liConfigure and manage AWS Security Hub, GuardDuty, AWS Config, CloudTrail, WAF, and Shield. /li liImplement encryption strategies for data at rest and in transit and support vulnerability management and security assessments. /li liMaintain security and compliance controls aligned with SOC 2, ISO 27001, HIPAA, FedRAMP, and other applicable frameworks. /li liDesign and maintain security architectures for AWS GovCloud regions. /li liBuild infrastructure as code using CloudFormation, Terraform, or CDK. /li liMaintain comprehensive architecture documentation, diagrams, standards, and technical guidance. /li liProvide technical leadership and mentorship to engineering teams on AWS architecture and cloud best practices. /li liParticipate in disaster recovery planning, testing, and resilience initiatives. /li liIdentify opportunities to optimize AWS costs, resource utilization, and overall infrastructure efficiency. /li /ulh3Requirements /h3ul li5+ years of experience in cloud architecture, including at least 3 years of hands-on AWS experience. /li liDeep understanding of AWS Organizations, multi-account architectures, and cloud governance strategies. /li liHands-on experience deploying and managing AWS Control Tower for account orchestration and governance. /li liProven experience designing and implementing AWS Landing Zone Architecture. /li liExperience working with AWS GovCloud (US) environments. /li liStrong knowledge of FedRAMP requirements, security controls, and authorization processes.



/li liExpert-level understanding of AWS networking services, including VPC, VPN, Direct Connect, and Transit Gateway. /li liStrong expertise in IAM policy design, permission management, identity federation, and least-privilege architectures. /li liDemonstrated experience implementing cloud security best practices and compliance frameworks. /li liProficiency with infrastructure as code technologies such as CloudFormation, Terraform, and/or AWS CDK. /li liExperience with AWS security and monitoring services, including Security Hub, GuardDuty, Config, and CloudTrail. /li liStrong understanding of encryption, security monitoring, vulnerability management, and incident response. /li liAbility to translate complex infrastructure and security requirements into scalable architectural solutions. /li liStrong technical communication, documentation, problem-solving, and mentoring skills. /li liIRS MBI clearance is required. /li liAWS Certified Solutions Architect - Professional is preferred. /li liAWS Certified Security - Specialty and AWS Certified Advanced Networking - Specialty certifications are preferred. /li liAdditional AWS certifications are a plus. /li /ulh3Benefits /h3ul liAnnual salary of $150,000-$170,000. /li liFully remote position. /li liFull-time employment. /li liOpportunity to work on complex AWS cloud architecture and multi-account environments. /li liExposure to AWS GovCloud, FedRAMP, cloud security, governance, and compliance initiatives. /li liOpportunity to provide technical leadership and influence cloud infrastructure strategy. /li liWork involving modern AWS automation, infrastructure as code, networking, and security technologies. /li /ulpData Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. /pp#LI-CL1 /p /p #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8159qk