AWS Infrastructure Architect

JOB DESCRIPTION:

We are looking for an AWS Infrastructure Architect to provide expert support in designing and documenting AWS network infrastructure for a proposal. The ideal candidate will bring 12 years of experience in AWS infrastructure architecture, with a strong background in network security, defense-related activities, automation, and proposal development. This role requires an in-depth understanding of AWS security best practices, network defense strategies, and the ability to contribute to high-level proposal documents.

Responsibilities:

• Proposal Design & Documentation: Collaborate with the proposal team to define, document, and validate AWS network infrastructure solutions, ensuring alignment with security best practices, customer requirements, and industry standards.
• CloudFormation Template Guidance: Provide expert-level input on defining CloudFormation templates for automating network configurations, account setup, and service provisioning, with an emphasis on security.
• Network Defense Strategy: Design and recommend network defense strategies for the AWS environment, including strategies for securing VPCs, configuring Security Groups, NACLs, and implementing defense-in-depth across multiple layers of the network.
• Account Bootstrap Baseline & Automated Provisioning: Define and automate baseline configurations for new AWS accounts, including security configurations and compliance standards.
• Automated Account Provisioning: Define and document automated workflows for secure account provisioning, ensuring compliance with AWS best practices and customer security requirements.
• Service Catalog for Security Teams: Support the design and automation of a Service Catalog tailored to business and security teams, ensuring secure and compliant resource deployment.
• Security & Monitoring: Provide guidance on implementing security measures, including intrusion detection, log aggregation, and monitoring within the AWS environment. This includes recommending AWS-native tools like GuardDuty, AWS Config, and CloudTrail.
• Compliance & Risk Management: Advise on designing solutions that ensure compliance with various security standards (e.g., FedRAMP, NIST, GDPR, HIPAA) and integrating AWS services for security and compliance.
• Technical Review & Validation: Review technical components of the proposal, ensuring that all AWS security and network infrastructure elements are clearly defined, feasible, and meet the customer s defense and compliance needs.

Key Skills & Qualifications:

• 12 years of experience in AWS infrastructure architecture, with a strong focus on network security, defense-related activities, and automation.
• Expertise in network security and defense strategies in AWS, including configuring Security Groups, Network ACLs, VPC security, and multi-layered defense mechanisms.
• Proven experience defining and documenting CloudFormation templates to automate network infrastructure and account provisioning securely.
• In-depth knowledge of AWS security tools and services (e.g., GuardDuty, Security Hub, AWS Config, CloudTrail) and experience implementing security monitoring and alerting.
• Familiarity with AWS compliance frameworks and the ability to design solutions that meet regulatory requirements (e.g., FedRAMP, NIST, HIPAA).
• Strong experience in contributing to proposal documents by providing technical guidance and documentation for secure, scalable AWS solutions.
• AWS certifications (e.g., AWS Certified Solutions Architect Professional) are highly preferred.

Preferred Skills:

• Experience in designing security solutions for large-scale, multi-account AWS environments.
• Knowledge of network defense tools, intrusion detection systems (IDS), and security operations practices in the AWS cloud.
• Familiarity with automation tools like Terraform, Ansible, or similar for security configuration management.
• Experience working with government or defense-related customers and understanding the security and compliance requirements specific to these sectors.