Senior Cloud Architect - AWS | FinOps & Cloud Engineering

Avenue Code; Brasile; In loco; BRL 220.000 - 340.000; Tempo pieno

Descrizione del lavoro

Avenue Code is seeking a Senior Cloud Architect to lead cloud cost optimization, infrastructure engineering, and operational efficiency across large-scale AWS environments. The role is hands-on, focusing on AWS, Terraform, FinOps, and automation to deliver secure, scalable solutions in a complex multi-account setup.

You will work with engineering and infrastructure teams to quantify savings, implement reusable Terraform modules, and ensure production-ready deployments with CI/CD pipelines,

Competenze

• Extensive hands-on experience designing, implementing, and managing AWS cloud infrastructure in complex enterprise environments.
• Strong expertise in AWS services, particularly IAM, Organizations, SCPs, S3, KMS, ECR, EC2/EBS, and CloudTrail.
• Advanced proficiency with Terraform, including modules, provider versioning, remote state, backends, drift detection, and lifecycle management.
• Solid understanding of AWS pricing models, cloud cost optimization, and FinOps with measurable impact.
• Experience with multi-account architectures, access management, and cloud governance.
• Proficiency in Python and shell scripting for automation and troubleshooting.
• Experience with CI/CD pipelines using Jenkins and/or GitHub Actions.
• Security awareness: scanning, vulnerability remediation in Gradle, Python, or Node.js.

Mansioni

• Analyze and optimize AWS infrastructure to improve cost efficiency, scalability, security, and performance.
• Identify and implement cloud cost optimization initiatives including KMS, S3, ECR lifecycle policies, EBS, and event-driven workflows.
• Measure and document infrastructure costs and savings before and after optimization.
• Design, develop, maintain, and review Terraform infrastructure with modules, state management, backends, and drift remediation.
• Manage multi-account AWS environments using Organizations, SCPs, IAM, cross-account roles, and AWS SSO.
• Investigate infrastructure issues and develop automation using AWS CLI, Python, and shell scripting.
• Validate changes in non-production via CI/CD, Terraform plans, and build logs using Jenkins and GitHub Actions.
• Identify and remediate security vulnerabilities and dependency issues across Gradle, Python, and Node.js projects.
• Collaborate with infra, security, and engineering teams to coordinate cloud changes and align with requirements.
• Create technical documentation, evidence, and PRs; maintain records in Confluence.
• Ensure changes maintain backward compatibility, follow security best practices, and minimize risks.
• Provide technical guidance and handoff documentation for production deployments.

Conoscenze

AWS cloud infra

Terraform

FinOps

CI/CD pipelines

Python scripting

Shell scripting

GitHub Actions

Jenkins

Security scanning

Cost optimization

English docs

Multi-account governance

Descrizione del lavoro

About The Opportunity

We are looking for a highly skilled and experienced Senior Cloud Architect to join our team and drive cloud cost optimization, infrastructure engineering, and operational efficiency across large-scale AWS environments. In this role, you will work in a complex, multi-account AWS ecosystem, analyzing existing infrastructure, identifying cost optimization opportunities, and designing and implementing scalable, secure, and cost-effective cloud solutions. You will take a hands‑on approach to infrastructure development, automation, troubleshooting, and validation, collaborating closely with engineering and infrastructure teams to ensure successful implementation. The ideal candidate is a hands‑on cloud professional with deep expertise in AWS, Terraform, FinOps, and cloud infrastructure automation, who is comfortable investigating complex environments, quantifying cost savings, and delivering production‑ready infrastructure changes.

Responsibilities

• Analyze and optimize AWS infrastructure to improve cost efficiency, scalability, security, and operational performance.
• Identify and implement cloud cost optimization initiatives involving AWS KMS, S3 Bucket Keys, ECR lifecycle policies, EBS volumes, and event-driven S3 workflows.
• Measure, analyze, and document infrastructure costs and savings before and after optimization initiatives.
• Design, develop, maintain, and review Terraform infrastructure, including reusable modules, provider configurations, state management, backends, and drift remediation.
• Manage and troubleshoot multi-account AWS environments using AWS Organizations, Service Control Policies (SCPs), IAM, cross-account roles, and AWS SSO.
• Investigate infrastructure issues and develop automation solutions using AWS CLI, GitHub CLI, Python, and shell scripting.
• Validate infrastructure changes in non-production environments through CI/CD pipelines, Terraform plans, and build logs using Jenkins and GitHub Actions.
• Identify and remediate security vulnerabilities and dependency issues using tools such as Dependabot and tfsec across Gradle, Python, and Node.js projects.
• Collaborate with infrastructure, security, and engineering teams to coordinate cloud changes and ensure alignment with technical and operational requirements.
• Create comprehensive technical documentation, implementation evidence, and pull requests, maintaining clear records in tools such as Confluence.
• Ensure infrastructure changes maintain backward compatibility, follow security best practices, and minimize operational risks.
• Provide technical guidance and handoff documentation to teams responsible for production deployments.

Required Qualifications

• Extensive hands‑on experience designing, implementing, and managing AWS cloud infrastructure in complex enterprise environments.
• Strong expertise in AWS services, particularly IAM, Organizations, SCPs, S3, KMS, ECR, EC2/EBS, and CloudTrail.
• Advanced proficiency with Terraform, including infrastructure modules, provider versioning, remote state, backends, drift detection, and infrastructure lifecycle management.
• Solid understanding of AWS pricing models, cloud cost optimization, and FinOps principles, with experience measuring and demonstrating the financial impact of infrastructure improvements.
• Experience working with multi‑account AWS architectures, access management, and cloud governance.
• Strong experience with Git‑based development workflows and CI/CD pipelines using Jenkins and/or GitHub Actions.
• Proficiency in Python and shell scripting for infrastructure automation, troubleshooting, and operational tasks.
• Experience investigating and resolving complex cloud infrastructure and automation issues using command‑line tools.
• Familiarity with security scanning, dependency management, and vulnerability remediation in at least one ecosystem: Gradle, Python, or Node.js.
• Strong understanding of cloud security, infrastructure reliability, and configuration management best practices.
• Excellent analytical and problem‑solving skills, with the ability to make technical decisions based on measurable evidence.
• Strong technical communication and documentation skills in English.
• Ability to work independently, collaborate with cross-functional teams, and coordinate infrastructure changes with resource‑owning teams.

Nice To Have Skills

• Experience managing large‑scale AWS environments with dozens of accounts and thousands of cloud resources.
• Familiarity with AWS landing zones and Organizations‑based governance frameworks.
• Hands‑on experience with AWS Cost Explorer, Cost Optimization Hub, Compute Optimizer, S3 Batch Operations, and ECR lifecycle management.
• Experience developing and maintaining shared, versioned Terraform modules used across multiple engineering teams.
• Experience implementing automated security remediation and vulnerability management at scale.
• AWS certifications such as AWS Certified Solutions Architect, SysOps Administrator, or DevOps Engineer, or FinOps Certified Practitioner.
• Experience designing and validating infrastructure changes that are subsequently deployed by separate production or resource‑owning teams.

Avenue Code reinforces its commitment to privacy and to all the principles guaranteed by the most accurate global data protection laws, such as GDPR, LGPD, CCPA and CPRA. The Candidate data shared with Avenue Code will be kept confidential and will not be transmitted to disinterested third parties, nor will it be used for purposes other than the application for open positions. As a Consultancy company, Avenue Code may share your information with its clients and other Companies from the CompassUol Group to which Avenue Code’s consultants are allocated to perform its services.