[LPS] AWS Cloud Database Administrator

Why Work at Lenovo

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

Description and Requirements

Role Summary

Responsible for design, deployment, and operational management of database platforms across AWS, Microsoft Azure, and on-premises environments, covering both project implementation and day-to-day BAU operations.

Key Responsibilities

• Experience in Design and deploy Microsoft SQL Server solutions on Azure (Azure VM, SQL MI, Azure SQL Database), AWS (EC2, RDS) and on-premises Microsoft SQL Server environments
• Hands on with Database Administration tasks monitoring, patching, upgrades, and configuration management across all platforms
• Manage native Microsoft SQL Server backups (full, differential, transaction log) and cloud-native backup solutions including Azure Backup for Microsoft SQL VMs and Azure SQL MI
• Configure and maintain LTR (Long-Term Retention), PITR (Point-in-Time Restore), and YTR (Yearly Retention) policies aligned to data retention and compliance requirements
• Manage TDE (Transparent Data Encryption) certificate lifecycle — creation, backup, rotation, and secure escrow — across on-premises, EC2/Azure VM, and managed cloud database services
• Conduct regular restore tests and DR drills, maintaining documented RTO/RPO targets
• Manage database security including logins, RBAC, auditing, Azure Key Vault integration for customer-managed keys (CMK), and SQL Server Audit configuration
• Perform query tuning, index management, and performance analysis using Query Store, Extended Events, AWS Performance Insights, and Azure SQL Intelligent Insights
• Automate routine DBA tasks using T-SQL and PowerShell, support database deployments
• Meet Security Compliance with Hardening Baselines, Auditor-General's Office (AGO), IM8 (Instruction Manual 8) and Vulnerability Management
• Provision and manage cloud database infrastructure using Terraform, ARM templates, or Bicep
• Create and maintain technical documentation including architecture design, runbooks, and SOP documents
• Thrives in a fast-paced, rapidly evolving cloud environment, adapting quickly to shifting priorities, new technologies, and changing business requirements
• Effectively manages multiple concurrent workloads balancing implementation projects, BAU operations, and incident response with the ability to context-switch seamlessly across teams and platforms
• Collaborate with various Application Project Managers, development teams, participate in on-call rotation for critical Database incident response, and deliver root cause analysis
• Possesses strong verbal and written communication skills, with the ability to convey complex technical concepts clearly to both technical peers and non-technical stakeholders
• Demonstrates strong self-organisation and the ability to independently plan, prioritise, and execute database engineering tasks with minimal supervision

Technical Skills Required

• Azure: SQL Server on Azure VM, Azure SQL MI, Azure SQL Database, Elastic Pools, Failover Groups, Geo-Replication, Azure Monitor, Azure Defender for SQL
• AWS: SQL Server on EC2, RDS for SQL Server, Multi-AZ, EBS storage, CloudWatch, IAM, Secrets Manager
• On-Premises: SQL Server 2016–2022, Always On AG, FCI, Log Shipping, SQL Server Agent
• Backup & Recovery: Native SQL backup, Azure Backup, LTR/PITR/YTR, Veeam/Commvault (advantageous)
• Security: TDE certificate management, Azure Key Vault (CMK), Dynamic Data Masking, Always Encrypted, Row-Level Security
• Scripting & Automation: T-SQL, PowerShell (essential); Python, Terraform, ARM/Bicep, Git (advantageous)

Technical Certifications

• Required (1 of the 2): DP-300 (Administering Relational Databases on Microsoft Azure),

DBS-C01 (AWS Certified Database Specialty)

• Advantageous: AZ-104 (Microsoft Azure Administrator), AWS SAA-C03 (AWS Certified Solutions Architect – Associate)

Experience & Education

• 7+ years database administration/engineering experience
• 4+ years managing cloud-hosted databases on AWS or Azure
• Degree in Computer Science, IT, or related field; equivalent experience considered