Description

Architect secure, multi-region AWS landing zones and enterprise infrastructure for financial services clients.

This role is remote.

Responsibilities

• Design multi-region, multi-account AWS landing zones using AWS Control Tower, Organizations, and custom Service Control Policies (SCPs).
• Build architectures satisfying SOC2, PCI-DSS, ISO 27001, and Federal Reserve/SEC compliance frameworks.
• Establish global, repeatable Infrastructure as Code patterns using production-grade Terraform, OpenTofu, or AWS CDK adhering to GitOps principles.
• Architect high-availability and disaster recovery frameworks meeting strict RTO/RPO requirements across multiple Availability Zones and Regions.
• Act as embedded subject matter expert within AWS Professional Services delivery squads to ensure milestone execution.

Required Skills

• 10+ years IT engineering experience, with 4+ years dedicated to enterprise AWS architecture.
• Minimum 3 years working directly within Financial Services (Banking, Trading, FinTech, Payments, or Insurance).
• Advanced mastery of AWS Networking: VPC, Transit Gateway, PrivateLink.
• Deep expertise in IAM: Resource policies, ABAC/RBAC, boundary policies.
• Proficiency with monitoring tools: CloudTrail, GuardDuty, AWS Config.
• AWS Certified Solutions Architect – Professional (Required).
• Strong background in edge security, encryption-at-rest/in-transit, KMS management, and AWS Network Firewall.

Preferred Skills

• AWS Certified Security – Specialty.

Key Skills

Education

Bachelor's degree