AWS Architect

BrezQ; California (MO); On-site; USD 140,000 - 180,000; Full time

Job summary

BrezQ is seeking an AWS Lead/Architect in Alameda, CA to design and deploy cloud environments using Terraform and related tools. You will work with stakeholders to craft runbooks and design documents, and deploy infrastructure through test and production environments, monitoring progress and updating teams along the way.

Strong Terraform expertise, backend knowledge, and experience with CI/CD pipelines (GitHub Actions, Atlantis) are essential, with familiarity in security tooling like TFSec,

Qualifications

• Experience as AWS Lead/Architect with deep AWS and Terraform expertise.
• Proficient in Terraform, modules, and backends, plus CI/CD toolchains.
• Ability to design cloud environments, create design documents and runbooks.
• Experience deploying to test and production and communicating with stakeholders.
• Knowledge of code quality tools like TFSec, GitLeaks and Semgrep is a plus.
• Atlantis and GitHub Actions experience to automate Terraform workflows.

Responsibilities

• Engage with stakeholders to design Cloud environments and write design docs.
• Build cloud environments using Terraform and deploy to test and production.
• Monitor deployments and update stakeholders on status and results.
• Leverage Terraform backends and modules for scalable infrastructure.
• Incorporate security tooling to identify hard coded keys and vulnerabilities.

Skills

AWS Lead/Architect

Terraform

CI/CD

GitHub Actions

OIDC

Atlantis

Terraform modules

Security tooling

Tools

Terraform

Atlantis

GitHub Actions

TFSec

GitLeaks

Semgrep

SCCM

Job description

JOb Location: Alameda, CA 94502 (Onsite)

• We are looking for a skilled AWS Lead/Architectwho is proficient in AWS and Terraform and CI/CD tools and technologies


• Passionate about Cloud and DevOps technologies and able to understand the customer requirements and accordingly deliver solutions


• Engage with stakeholders to design Cloud environments, Create Design documents, runbooks for new tools and services as applicable


• Build designed Cloud environments using Terraform, deploy designed environments to test and production, Monitor Deployment and update stakeholders


• Advanced level of Terraform knowledge; working with modules, use of terraform functions and a custom terraform backend


• Knowledge of code quality tools such as TFSec, GitLeaks and Semgrep to identify hard coded keys in the code will be added advantage


• Added advantage is use of Atlantis tool to deploy infrastructure through terraform pull requests


• Work with GitHub Actions and OIDC to trigger terraform code to perform infra tasks such as - deploy applications, deploy S3 content

AWS Services

• Advanced S3 usage - lifecycle policies, bucket policy, expiration policy


• Lambda - E.g., to gather metrics from other AWS services e.g. S3, IAM etc.,


• OpenSearch; AWS Shield Advanced; Deploy and configure ECS, ECR


• SSM Setup and Configuration; SES, SQS and SNS


• Setting up, configuration of SageMaker and AWS Workspaces


• AWS EC2, ASG , Create custom AMI with agents of tools such as Sentinel One, SCCM


• AWS Control Tower, AWS Cognito, AWS AppFlow, AWS Trusted Advisor


• Systems Manager, QuickSight and Route53 as domain hosting service


• Secrets manager to rotate access keys for services such as JIRA or RDS