AWS Architect - Data Replication & Secure Cloud Infra

Avance Consulting; Polska; On-site; PLN 393,000 - 568,000; Full time

Job summary

Avance Consulting seeks an experienced AWS-focused engineer to build a PoV for a complex data platform. You will design the VPC, subnets, routing, and security groups, and implement DMS for MongoDB CDC with full load and ongoing replication.

The role includes routing DMS output into Kinesis, writing to S3 as an immutable log, and building a governance-compliant event store. You will also implement RDS PostgreSQL as the ledger, DynamoDB for audit, and use Secrets Manager and KMS for secure key

Qualifications

• Strong experience architecting AWS-based PoV environments with secure outbound controls.

Responsibilities

• Build and configure AWS PoV environment (VPC, subnets, routes, SGs).
• Implement AWS DMS for MongoDB CDC, including full load and ongoing replication.
• Configure DMS endpoints, replication task, checkpointing and latency monitoring.
• Route DMS output into Kinesis Data Streams as the single event log.
• Write immutable raw change history to S3 via Kinesis Firehose with Object Lock.
• Build S3 event store with governance and replay-ready storage.
• Implement PostgreSQL RDS as the financial ledger target and DynamoDB as audit.
• Use Secrets Manager for credential storage and access control.
• Use KMS CMKs for RDS, DynamoDB, S3, Kinesis, Secrets Manager and signing.
• Configure CloudWatch logs/metrics for DMS, pgAudit, alarms and evidence.
• Enable VPC Flow Logs to prove compliant traffic paths.
• Define VPN transport as primary path, with controlled fallback.
• Create CloudWatch alarms, EventBridge rules and Step Functions for CDC control.
• Develop Lambda guard for canary reads, roles, oplog headroom and DMS latency.
• Run reconciliation and replay workloads on ECS Fargate, orchestrated by Step Functions.
• Run JMeter load tests against MongoDB replica set via ECS Fargate.
• Capture DMS lag, JMeter throughput and latency metrics in CloudWatch.
• Implement multi-tenant isolation with tenant IAM and DynamoDB LeadingKeys.
• Correlate isolation tests with CloudTrail and pgAudit logs.
• Use Terraform 1.5+ for all provisioning and GitHub Actions with OIDC for deploys.
• Store Terraform state remotely with locking and provide zero-drift teardown evidence.

Skills

AWS

DMS

Kinesis

S3

RDS PostgreSQL

DynamoDB

Terraform

GitHub Actions

ECS Fargate

EventBridge

Tools

MongoDB

CloudWatch

KMS

Athena

Glue

OpenSearch

Job description

Avance Consulting seeks an experienced AWS-focused engineer to build a PoV for a complex data platform. You will design the VPC, subnets, routing, and security groups, and implement DMS for MongoDB CDC with full load and ongoing replication.

The role includes routing DMS output into Kinesis, writing to S3 as an immutable log, and building a governance-compliant event store. You will also implement RDS PostgreSQL as the ledger, DynamoDB for audit, and use Secrets Manager and KMS for secure key