AWS System Administrator

Virtuos; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Benefits offered by this job

Career progression

Peer network

Industry leaders exposure

Salary & benefits

Training & development

Mobility program

Team outings

Work-life balance

Job summary

Virtuos Kuala Lumpur is seeking a Senior AWS System Administrator to operate, maintain and optimize a secure, cost-conscious AWS platform across multiple accounts. You will lead infrastructure automation, governance and incident response while mentoring colleagues and aligning cloud services with business needs.

The role requires hands-on expertise in IAM, networking, Terraform, CI/CD, and PKI, with strong scripting in Python/Bash/PowerShell.

Qualifications

• Hands-on administration of production AWS environments with multi-account governance.
• Experience with IAM, networking, compute, storage, monitoring, and backup.
• Ability to diagnose complex issues and manage incidents with risk decisions.
• Practical Terraform, Git, and CI/CD experience; scripting in Python, Bash or PowerShell.

Responsibilities

• Account and organization administration, cross-account access, and consolidated billing support.
• Identity and access management and Entra ID integration coordination.
• Networking, DNS, edge services, and cost considerations with network teams.
• Security, compliance operations, vulnerability management, and audit evidence.
• PKI and certificate lifecycle management across AWS services.
• Landing zone governance, Terraform module maintenance, and platform standards.
• Infrastructure automation, CI/CD pipelines, and change management.
• Compute, OS administration for Linux/Windows, patching and hardening.
• Container platforms (ECS/Fargate, EKS) and registry management.
• Storage, data protection, backups, DR planning and testing.
• Managed databases, performance, replication health, and upgrades.
• Cost, capacity planning and continuous improvement with FinOps.
• Stakeholder engagement and coordination with AWS Support and suppliers.
• Operational leadership, incident response, documentation, and runbooks.

Skills

AWS

IAM

Networking

Terraform

CI/CD

Git

Python

Bash

PowerShell

Linux

Windows

Container ops

Managed DB

Tools

AWS CLI

Terraform tooling

CI/CD tooling

Python scripting

Git version control

Job description

PLAY, GROW and WIN

To be a part of Virtuos means to be a creator.

At Virtuos, we harness the latest technologies to make games better and more immersive than ever before. That is why we pride ourselves in constantly pushing the boundaries of possibility since our founding in 2004.

Virtuosi is a team of experts – people who have come together to share their mutual passion for making and playing games. People with the same enthusiasm for exploring new ideas and the constant drive to excel in their field. People who believe in earning success through dedication.

At Virtuos, we are at the forefront of gaming, creating exciting new experiences daily. Join us to Play, Grow and Win – together.

ABOUT THE POSITION

The Senior AWS System Administrator operates, maintains and improves a secure, reliable and cost‑conscious AWS platform. The role combines hands‑on administration across a multi‑account environment with operational leadership, infrastructure automation, disciplined change delivery and recovery preparedness. It provides technical guidance to colleagues and helps translate approved business and architectural requirements into supportable cloud services.

Responsibilities

Account and organization administration

Administer AWS account lifecycles, organizational units and approved guardrails, cross‑account access and resource sharing. Validate policy changes and support consolidated billing with Finance and FinOps.

Identity and access management

Manage least‑privilege IAM access and IAM Identity Center integration with Microsoft Entra ID. Coordinate identity lifecycles, access reviews, authentication and privileged or emergency access controls with identity owners, favoring temporary credentials and removing stale access.

Networking, connectivity and edge services

Operate approved AWS networks, private endpoints, hybrid and cross‑region connectivity, maintaining secure routing and access controls.

Manage DNS, edge delivery and load balancing; troubleshoot connectivity, health and performance, and review availability and cost with network teams.

Security and compliance operations

Implement approved security baselines, threat detection, vulnerability management, configuration compliance, edge protection and secret rotation, retaining audit evidence. Coordinate authorized testing and approved remediation with Security, escalating exceptions for risk decisions.

PKI and certificate lifecycle

Manage certificate issuance, deployment, renewal and expiry monitoring across supported AWS services. Support private CA integration, mutual TLS, revocation and key protection with PKI and Security owners, observing service‑specific requirements.

Landing zone and platform standards

Operate Control Tower landing zones, account enrollment and approved infrastructure‑as‑code customizations. Maintain versioned Terraform modules, a module registry, secure locked state and platform standards; test changes, address drift and evolve designs with architecture owners.

Infrastructure automation and CI/CD

Maintain secure infrastructure pipelines, Terraform code and automation with version control, peer review, testing and deployment evidence. Assess impact, dependencies and rollback, preserving approvals and segregation of duties.

Compute and operating‑system administration

Manage EC2 capacity, scaling, quotas and hardened images, including Linux and Windows configuration, patching and vulnerability remediation with tested rollback.

Container platforms and registries

Operate ECS/Fargate, EKS and ECR, managing capacity, scaling, permissions, registry lifecycle and replication, and tested upgrades. Coordinate secure diagnostics, image remediation and workload troubleshooting with developers.

Storage and data protection controls

Administer object, block and file storage, archives and approved hybrid access, managing permissions, encryption, capacity, performance and recovery. Apply lifecycle, replication, immutability, retention and deletion controls agreed with data and compliance owners, considering retrieval time and cost.

Managed database platform operations

Operate approved managed databases, caches and migration services, maintaining availability, capacity, patching, connectivity, monitoring and recovery. Coordinate upgrades, performance investigations and replication health with DBAs and application owners, who retain schema, query, data correctness and migration acceptance decisions.

Backup and disaster recovery

Maintain centralized backups, retention, protected vaults and supported cross‑account or cross‑region copies, resolving failures and documenting recovery dependencies. Test approved resilience and disaster‑recovery plans against agreed RTO/RPO targets with service owners, recording evidence and corrective actions.

Cost, capacity and continuous improvement

Monitor costs, anomalies, budgets and allocation tags with FinOps; validate right‑sizing and approved resource cleanup without degrading service. Provide utilization evidence for authorized commitment purchases and contribute to Well‑Architected reviews and continuous improvement.

Stakeholder and supplier engagement

Gather operational requirements, contribute to architecture reviews and coordinate technical issues with AWS Support and suppliers. Provide evidence for commercial discussions, leaving negotiation, contracts and spending commitments to authorized decision‑makers.

Service operations and operational leadership

Maintain actionable monitoring, audit logging and alerts against agreed service objectives; lead or support incident restoration, communication and escalation, preserving evidence, coordinating with Security and tracking root‑cause and post‑incident actions.

Deliver risk‑assessed, approved changes with validation and rollback; maintain inventories, configuration records, diagrams, procedures and tested runbooks, ensure operationally ready handovers, mentor colleagues, automate safely and elevate technical debt or risks beyond delegated authority.

Qualifications

Required capabilities

Demonstrated hands‑on administration of production AWS environments, including multi‑account governance, IAM, networking, compute, storage, monitoring and backup. Sound understanding of the AWS shared responsibility model, least privilege, encryption, secure configuration and operational resilience. Ability to diagnose complex infrastructure issues across service boundaries and manage incidents and changes with clear risk and escalation decisions.

Practical Terraform, Git and CI/CD experience, with the ability to create maintainable infrastructure code and review deployment plans. Competence with the AWS CLI and scripting in Python, Bash or PowerShell, plus Linux and/or Windows administration relevant to the estate. Working knowledge of container operations and managed database infrastructure, including when to involve specialist teams.

Strong written documentation, stakeholder communication and technical mentoring skills. Ability to prioritize competing operational demands, work independently within delegated authority and collaborate on cross‑team problems.

Preferred capabilities

Relevant current AWS operations, architecture, DevOps, security or networking certification. Deeper experience with Control Tower, IAM Identity Center and Entra ID integration; hybrid and cross‑region networking; EKS or ECS/Fargate; PKI and mutual TLS; or regulated data retention and recovery testing.

• A rewarding career path with long‑term career potential
• Network of highly talented and driven peers
• Exposure to some of the biggest names and franchises in the industry
• Competitive salary and social benefits
• Develop your expertise in the latest platforms and technology
• Constant training and career development to enhance personal value and skills
• Career and international mobility opportunities with Virtuos Internal Mobility Program
• Awesome staff activities and company‑sponsored outings
• Enjoy a healthy work‑life balance environment

People matter. Diverse opinions and experiences matter. At Virtuos, our talented teams are the cornerstone of our success, and we recognize that fostering and advocating for inclusivity is at the center of what we do best - we make games better, together. Virtuos is proud to be an equal opportunity employer that embraces diversity of thought, expression, culture, and backgrounds.

Founded in 2004, Virtuos is one of the largest independent video game development companies. We are headquartered in Singapore with offices in Asia, Europe, and North America. Specializing in full‑cycle game development and art production, we have delivered high‑quality content for more than 1,500 console, PC, and mobile games. Our clients include 23 of the top 25 gaming companies worldwide.

About Our Team

Officially launched in 2022, Virtuos Kuala Lumpur (KL) is home to a multicultural team of talented and passionate game developers. Led by a team of industry veterans, we cover a wide range of technical capabilities from art to engineering at Virtuos KL. As our team continues to expand, we welcome new talent at multiple career entry points to join us and make games better, together!