AWS Infrastructure Engineer

ISITE TECHNOLOGIES; Austin (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

ISITE TECHNOLOGIES seeks a senior Cloud Infrastructure Architect to design and validate landing zone configurations for FICC workloads across multiple AWS regions. You will define VPC architectures, multi-region topology, and self-managed OpenShift on EC2, with Aurora Global Database and DynamoDB Global Tables for global data replication.

You will lead DR strategy with F5 GTM and cross-region replication, implement Terraform modules, and ensure cost governance and tagging per environment.

Qualifications

• Lead cloud infrastructure architecture design for DTCC A3P workloads and multi-region AWS groundwork.
• Define Terraform IaC modules for enterprise-scale deployments with cost governance.
• Design VPCs, OpenShift on EC2, Aurora Global DB, DynamoDB Global Tables, and DR topology.
• Establish cross-region data replication, hybrid connectivity, and monitoring integrations.

Responsibilities

• Landing Zone Architecture: configure multi-account governance and SCPs for FICC workloads.
• Define multi-region VPC design and endpoints, security groups, and NACLs.
• DR design with F5 GTM and cross-region replication across services.
• Create Terraform module structure for OCP on EC2, Aurora, DynamoDB, IBM MQ, and global scaling.
• Compute sizing for OCP worker nodes, Autosys, and IBM MQ RDQM with HA.
• Configure Dynatrace One Agent and Splunk log forwarding for observability.
• Define on-premises connectivity (Direct Connect/VPN) for Ping Federate, CRS, and Venafi.
• Implement cost governance via tagging per SYS ID and environment.

Skills

Cloud architecture

Landing zone

VPC design

OpenShift on EC2

Aurora Global DB

DynamoDB Global Tables

IBM MQ RDQM

Terraform IaC

Disaster Recovery

Cross-region replication

Hybrid connectivity

Cost governance

Tagging strategy

Tools

Dynatrace OneAgent

Splunk

Route 53

Direct Connect

Job description

Location: Boston MA, Arlington, VA, Atlanta GA, Austin TX, Chicago, IL, Cleveland OH

Experience: 10 Years

Skills:

Lead cloud infrastructure architecture design for DTCC A3P landing zone migration supporting FICC (Fixed Income, Currency, and Commodities) workloads. Design multi-region AWS infrastructure including VPC architecture, self-managed OpenShift on EC2, Aurora Global Database, DynamoDB Global Tables, and IBM MQ RDQM clustering. Architect disaster recovery topology with F5 GTM integration, cross-region data replication, and hybrid connectivity (Direct Connect/VPN) for on-premises integration. Define Terraform IaC modules for enterprise-scale, multi-account deployments with cost governance and Tier 1 resiliency requirements.

Role Scope & Key Responsibilities

Primary Responsibilities:

• Landing Zone Architecture: Design and validate DTCC A3P landing zone configuration for FICC workloads with AWS Organizations, SCPs, and multi-account governance
• Network Design: Define VPC architecture with public/private subnets, VPC endpoints, security groups per SYS ID; configure multi-region topology (us-east-1 primary, us-east-2 standby)
• Disaster Recovery: Design F5 GTM integration for DR failover and operational traffic rotation; architect cross-region data replication (SRDF-A equivalent, Aurora Global DB, DynamoDB Global Tables)
• Infrastructure as Code: Define Terraform module structure for FICC infrastructure (OCP on EC2, Aurora, DynamoDB, IBM MQ, Global Scape, Autosys)
• Compute Architecture: Design EC2 instance sizing and placement for OCP worker nodes, Autosys server, Global cape SFTP, IBM MQ RDQM with HA configurations
• Observability: Configure Dynatrace One Agent deployment on OCP and Splunk log forwarding
• Hybrid Connectivity: Define on-premises connectivity architecture (Direct Connect/VPN for Ping Federate, CRS, CDTS MQ, Venafi)
• Cost Governance: Design tagging strategy (per SYS ID, per environment, per wave) and validate A3P platform service readiness
• A3P Landing Zone Design (FICC-specific)
• VPC and Network Architecture (multi-region)
• On-Premises Connectivity Architecture

EC2 Sizing Recommendations

AWS Skills & Services

Governance & multi-account:

• AWS Organizations: OU structure, SCPs, consolidated billing, cross-account strategies

Networking:

• Amazon VPC: Advanced design (public/private subnets, VPC endpoints, security groups, NACLs, route tables)
• AWS Transit Gateway: Hub-and-spoke architecture, multi-region peering
• AWS Direct Connect: Hybrid connectivity, VIFs, LAG configurations
• AWS VPN: Site-to-Site VPN for on-premises integration
• Elastic Load Balancing: ALB/NLB for OCP ingress, F5 GTM integration patterns
• Amazon Route 53: DNS management, health checks, failover routing

Compute & Containers:

• Amazon EC2: Instance families (compute/memory/storage optimized), placement groups, Auto Scaling, self-managed infrastructure
• OpenShift on EC2: Overlay networks, load balancers, ingress controllers, persistent storage (EBS/EFS)

Database & Storage:

• Amazon Aurora: Global Database (cross-region replication), cluster endpoints, failover mechanisms
• Amazon DynamoDB: Global Tables, on demand/provisioned capacity, DAX caching
• Amazon S3: Bucket policies, lifecycle policies, cross-region replication, versioning
• Amazon EBS: Volume types, snapshots, encryption, cross-region copy
• Amazon EFS: Shared file storage for OCP persistent volumes

Messaging & Integration:

• IBM MQ RDQM on EC2: Clustering, HA configurations, mTLS, channel authentication
• Amazon MQ: Managed message broker (if applicable for non-RDQM workloads)

Disaster Recovery:

• AWS Backup: Centralized backup, cross-region/cross-account backup
• AWS Elastic Disaster Recovery (DRS): Continuous replication, failover orchestration
• F5 GTM Integration: DNS-based traffic management, health monitoring

Monitoring & Observability:

• AWS X-Ray: Distributed tracing
• Dynatrace OneAgent: APM integration with OCP
• Splunk: Log forwarding and SIEM integration

Security & Compliance:

• AWS IAM: Advanced policies, cross-account roles, service accounts
• AWS KMS: Customer Managed Keys, key policies, cross-region replication
• AWS Secrets Manager: Credential rotation, cross-account access
• AWS Security Hub: Centralized security findings

Infrastructure as Code:

Cost Management:

• AWS Budgets: Cost alerts, anomaly detection
• Tagging Strategy: Per SYS ID, per environment, per wave

Hybrid Connectivity:

• AWS Direct Connect: Dedicated network connections, VIFs, LAG

Financial Services & Industry Skills

• Large regulated financial-services delivery with formal change-control, audit and risk governance
• Operational resilience expectations including RTO/RPO, multi-region DR and evidence for audit review
• Awareness of applicable controls and regulations such as DORA, NIST CSF 2.0, PCI DSS, SEC cyber rules, RegSCI and SIFMU/FMI expectations where relevant
• Ability to create Tech Risk-ready documentation including ADRs, runbooks, design docs, threat models and validation evidence
• Clear communication with client engineering, security, SRE, data and platform stakeholders as an embedded SME

Certifications / Qualifications

• AWS Certified Solutions Architect - Associate / Professional
• AWS Certified SysOps Administrator - Associate
• AWS Certified DevOps Engineer - Professional preferred