Cloud Architect

HMG AMERICA LLC; Town of Florida (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

HMG AMERICA LLC in New York seeks a seasoned AWS infrastructure engineer to lead design and deployment of cloud platforms and workloads.

You will build robust DevOps pipelines, implement IaC with Terraform, CloudFormation, or CDK, and enforce security controls across IAM, AWS Organizations SCPs, KMS, and monitoring. Collaborate with security, networking, and compliance teams to deliver secure-by-design deployments and drive observability.

Responsibilities

• Lead end-to-end AWS infrastructure design and deployment for new cloud platforms and workloads.
• Design and implement robust DevOps pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, Jenkins, or equivalent.
• Implement Infrastructure-as-Code (IaC) using Terraform, AWS CloudFormation, or AWS CDK to ensure repeatable deployments.
• Define and enforce cloud security controls including IAM, IAM Identity Center (AWS SSO), AWS Organizations SCPs, KMS encryption, GuardDuty, Security Hub, and Amazon Inspector.
• Establish cloud governance using AWS Organizations, Control Tower, SCPs, tagging frameworks, budget controls, and compliance standards.
• Coordinate with security teams for identity integration, network segmentation, secrets management, encryption, logging, and audit requirements.
• Architect resilient AWS networking solutions using VPCs, Transit Gateway, Direct Connect, VPN, Route 53, ELB, and hybrid connectivity models.
• Implement observability platforms using CloudWatch, X-Ray, OpenSearch, Prometheus/Grafana integrations, and SIEM integrations.
• Define backup, disaster recovery, and business continuity solutions using AWS Backup, cross-region replication, and AWS Elastic Disaster Recovery.
• Conduct architecture reviews, publish design docs, runbooks, and mentor engineering teams.
• Collaborate with application, security, networking, and compliance teams to ensure secure-by-design deployments.
• Drive automation, standardization, cost optimization, and continuous service improvements.

Job description

• Account factory, OUs, IAM, ALB, Security Hub, SCP.
• Database Migration.
• DB Replications.
• Backup and restore.
• Disaster Recovery Implementation.
• CICD.
• Monitoring Areas.
• Terraform.

Key Responsibilities: -

• Lead end-to-end AWS infrastructure design and deployment for new cloud platforms and workloads.
• Design and implement robust DevOps pipelines using AWS Code Pipeline, Code Build, Code Deploy, GitHub Actions, Jenkins, or equivalent.
• Implement Infrastructure-as-Code (IaC) using Terraform, AWS CloudFormation, or AWS CDK to ensure repeatable and auditable deployments.
• Define and enforce cloud security controls including IAM, IAM Identity Center (AWS SSO), AWS Organizations SCPs, KMS encryption, Guard Duty, Security Hub, and Amazon Inspector.
• Establish cloud governance using AWS Organizations, Control Tower, Service Control Policies (SCPs), tagging frameworks, budget controls, and compliance standards.
• Coordinate with security teams for identity integration, network segmentation, secrets management, encryption, logging, and audit requirements.
• Architect resilient AWS networking solutions using VPCs, Transit Gateway, Direct Connect, VPN, Route 53, Elastic Load Balancers, and hybrid connectivity models.
• Implement observability platforms using Amazon CloudWatch, AWS X-Ray, OpenSearch, Prometheus/Grafana integrations, and SIEM integrations.
• Define backup, disaster recovery, and business continuity solutions using AWS Backup, cross-region replication, and AWS Elastic Disaster Recovery.
• Conduct architecture reviews, publish design documentation, runbooks, operational procedures, and mentor engineering teams.
• Collaborate with application, security, networking, and compliance teams to ensure secure-by-design deployments.
• Drive automation, standardization, cost optimization, and continuous service improvements.