AWS Architect
Summary
Designs, operates, and optimizes the company's AWS cloud from Toronto: advanced networking (VPC, Transit Gateway, PrivateLink), disaster recovery, IAM/security governance, and Terraform + GitLab CI/CD. Also covers Windows/Linux administration, patching, cost reporting, CloudWatch monitoring, and provisioning Bedrock/SageMaker workloads.
AWS Architect
Key Responsibilities
1. AWS Architecture Design & Implementation
- Design & Support: Architect and amend cloud infrastructure with a focus on high availability, fault tolerance, and workload optimization.
- Core Networking: Administer and optimize advanced AWS networking, including VPCs, Transit Gateway (TGW), VPNs, VPC Endpoints, PrivateLink, Peering, Route Tables, and NACLs.
- Traffic Management: Configure and manage Application Load Balancers (ALB) and Network Load Balancers (NLB).
- IP Management: Handle VPC subnetting and CIDR block/mask administration.
2. Disaster Recovery (DR) & Business Continuity
- DR Strategy: Design and implement robust DR solutions utilizing AWS native services to meet strict business RTO and RPO objectives.
- Replication & Backup: Leverage AWS Elastic Disaster Recovery (EDR), AWS Backup, S3 Multi-Region Access Points (MRAP), and RDS/Redshift cross-region replication.
- Cross-Region Operations: Lead upcoming DR testing initiatives to ensure infrastructure and applications seamlessly restore in the designated recovery region within established RTOs.
3. Security, Governance & Identity Management
- Access Control: Manage IAM, AWS Identity Center, Control Tower, and AWS Landing Zone environments.
- Data Protection: Utilize multi-region AWS Custom KMS keys for data encryption.
- Compliance & Auditing: Analyze AWS Security Hub findings, drive remediation efforts, and enforce compliance using AWS Config and strict resource tagging policies.
4. DevOps, Automation & CI/CD
- Infrastructure as Code (IaC): Provision and manage infrastructure using Terraform or CloudFormation.
- Pipeline Management: Set up and maintain CI/CD pipelines using GitLab (or similar Git tools) and configure GitLab Runners.
- Configuration Management: Utilize Ansible for automated configuration and deployment.
- Repository Governance: Administer Git branching strategies, including permissions, code promotion, and pull request reviews.
5. System Administration & Operations
- OS Support: Perform system administration, troubleshooting, and resource provisioning across both Windows and Linux environments.
- Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.
- Data & AI Provisioning: Spin up and manage Amazon Bedrock, SageMaker, and standard compute instances.
- L1 Troubleshooting: Support basic troubleshooting for AWS Lambda functions and AWS Glue data jobs.
6. Financial & Performance Optimization
- Cost Optimization: Analyze AWS Cost Optimizer data to identify savings opportunities.
- Executive Reporting: Deliver weekly and monthly billing and utilization reports for management.
- Monitoring & Observability: Build custom CloudWatch Dashboards.