AWS Solutions Architect

Itmates; United States; A distancia; USD 180.000 - 240.000; Jornada completa

Descripción de la vacante

Itmates is seeking a Senior AWS Architect to own the architecture of a regulated payments platform. You will design multi-account landing zones, implement security baselines, and drive FinOps in a remote, contractor-engaged role across LATAM and US overlap.

You will collaborate with engineering on services (EKS, Lambda, RDS/Aurora, MSK), ensure PCI SOC2 compliance, and lead architecture reviews to optimize cost and resilience.

Formación

• 8+ years in infrastructure or cloud engineering.
• 4+ years architecting on AWS.
• Infrastructure as code at scale with Terraform or CDK.
• Experience in PCI DSS or SOC 2 environments.
• Deep networking knowledge (VPC, Transit Gateway, PrivateLink).
• Ability to write clear design documents and defend trade-offs in English.

Responsabilidades

• Design and evolve the multi-account landing zone (Organizations, Control Tower, IAM Identity Center).
• Define reference architectures for services on EKS, Lambda, RDS/Aurora and MSK.
• Lead multi-region resilience and disaster recovery design with tested RTO and RPO targets.
• Set security standards: network segmentation, KMS key strategy, secrets management.
• Run architecture reviews and Well-Architected assessments with engineering teams.
• Drive FinOps: tagging, budgets, savings plans and right-sizing.

Conocimientos

AWS Architecture

Terraform/CDK

Security & Compliance

Networking (VPC/Transit)

English Communication

Descripción del empleo

Client: US fintech (payments platform) · Location: remote, LATAM, US Eastern overlap · Level: senior / principal · Engagement: full-time contractor You will own the AWS architecture of a regulated payments platform: multi-account structure, network, security baseline and cost.

What you will do

• Design and evolve the multi-account landing zone (Organizations, Control Tower, IAM Identity Center)
• Define reference architectures for services on EKS, Lambda, RDS/Aurora and MSK
• Lead multi-region resilience and disaster recovery design with tested RTO and RPO targets
• Set security standards: network segmentation, KMS key strategy, secrets management
• Run architecture reviews and Well-Architected assessments with engineering teams
• Drive FinOps: tagging, budgets, savings plans and right-sizing

What you bring

• 8+ years in infrastructure or cloud engineering, 4+ architecting on AWS
• Infrastructure as code at scale with Terraform or CDK
• Experience in PCI DSS or SOC 2 environments
• Deep networking knowledge (VPC, Transit Gateway, PrivateLink)
• Ability to write clear design documents and defend trade-offs in English

Nice to have

• AWS Solutions Architect Professional or Security Specialty
• Previous SRE or platform engineering role
• Experience with core banking or card-processing integrations

Originally posted on Himalayas