Senior AWS Cloud Architect – Multi-Account & EKS Expert

Acestack; Irvine (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Acestack is seeking an AWS Cloud Architect in Irvine, CA to lead secure, scalable cloud infra for a data center exit. You will design Landing Zones, VPCs, and security controls while guiding migration efforts and multi-account governance.

The role requires hands-on AWS expertise (EC2, EKS, networking), strong automation skills with Terraform, CloudFormation, and Ansible, and collaboration across app, DB, security, and infra teams.

Qualifications

• Strong architectural expertise in AWS infra design and multi-account Landing Zones.
• Deep understanding of AWS migration methodologies for large DC exit programs.
• Hands-on with EC2, VPC, TGW, Route 53, ALB/NLB, EBS/EFS/FSx, and S3.
• Knowledge of IAM, KMS, Secrets Manager, SCPs, GuardDuty, Config, CloudTrail.
• Hybrid connectivity and networking with Direct Connect/VPN.
• Experience architecting EKS clusters with networking, scaling, and workload placement.
• Proficient in Terraform, CloudFormation, and Ansible automation.
• Understanding Windows Server 2016-2025 and RHEL 7-9 infra dependencies.
• Strong analytical skills to identify blockers and performance gaps.
• Ability to collaborate with app, DB, security, and infra teams.

Responsibilities

• Lead AWS infra-architecture for the Data Center Exit initiative.
• Design Landing Zones with account structure, SCPs, IAM guardrails, governance.
• Architect VPC layouts, subnets, routing, Direct Connect/VPN, TGW.
• Define cloud security architecture including identity, encryption, monitoring.
• Oversee EC2 migration, right-sizing, HA patterns, AMI mgmt, patching.
• Provide EKS architecture guidance for cluster design and deployment.
• Ensure connectivity for app/DB to Oracle Exadata on AWS and SQL workloads.
• Develop Terraform/CloudFormation pipelines for provisioning infra.
• Produce HLD/LLD, design standards, migration docs, and runbooks.
• Support migration waves by validating infra readiness and resolving issues.

Skills

EC2 design

VPC networking

Transit Gateway

Route 53

ALB/NLB

S3

IAM & KMS

Secrets Manager

SCPs & GuardDuty

Config & CloudTrail

Hybrid connectivity

EKS architecture

Terraform

CloudFormation

Ansible

Windows Server 2016-2025

RHEL 7-9

Tools

Terraform

CloudFormation

Ansible

Job description

Acestack is seeking an AWS Cloud Architect in Irvine, CA to lead secure, scalable cloud infra for a data center exit. You will design Landing Zones, VPCs, and security controls while guiding migration efforts and multi-account governance.

The role requires hands-on AWS expertise (EC2, EKS, networking), strong automation skills with Terraform, CloudFormation, and Ansible, and collaboration across app, DB, security, and infra teams.