AWS Architect

"Key Responsibilities

1. AWS Architecture Design & Implementation

• Design & Support: Architect and amend cloud infrastructure with a focus on high availability, fault tolerance, and workload optimization.

• Core Networking: Administer and optimize advanced AWS networking, including VPCs, Transit Gateway (TGW), VPNs, VPC Endpoints, PrivateLink, Peering, Route Tables, and NACLs.

• Traffic Management: Configure and manage Application Load Balancers (ALB) and Network Load Balancers (NLB)

• IP Management: Handle VPC subnetting and CIDR block/mask administration.

2. Disaster Recovery (DR) & Business Continuity

• DR Strategy: Design and implement robust DR solutions utilizing AWS native services to meet strict business RTO and RPO objectives.

• Replication & Backup: Leverage AWS Elastic Disaster Recovery (EDR), AWS Backup, S3 Multi-Region Access Points (MRAP), and RDS/Redshift cross-region replication.

• Cross-Region Operations: Lead upcoming DR testing initiatives to ensure infrastructure and applications seamlessly restore in us-east-1 within established RTOs.

3. Security, Governance & Identity Management

• Access Control: Manage IAM, AWS Identity Center, Control Tower, and AWS Landing Zone environments.

• Data Protection: Utilize multi-region AWS Custom KMS keys for data encryption.

• Compliance & Auditing: Analyze AWS Security Hub findings, drive remediation efforts, and enforce compliance using AWS Config and strict resource tagging policies.

4. DevOps, Automation & CI/CD

• Infrastructure as Code (IaaC): Provision and manage infrastructure using Terraform or CloudFormation.

• Pipeline Management: Set up and maintain CI/CD pipelines using GitLab (or similar Git tools) and configure GitLab Runners.

• Configuration Management: Utilize Ansible for automated configuration and deployment.

• Repository Governance: Administer Git branching strategies, including permissions, code promotion, and pull request reviews.

5. System Administration & Operations

• OS Support: Perform system administration, troubleshooting, and resource provisioning across both Windows and Linux environments.

• Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.

• Data & AI Provisioning: Spin up and manage Amazon Bedrock, SageMaker, and standard compute instances.

• L1 Troubleshooting: Support basic troubleshooting for AWS Lambda functions and AWS Glue data jobs.

6. Financial & Performance Optimization

• Cost Optimization: Analyze AWS Cost Optimizer data to identify savings opportunities.

• Executive Reporting: Deliver weekly and monthly billing and utilization reports for HCCA management.

• Monitoring & Observability: Build custom CloudWatch Dashboards."