Systems Architect - AWS EKS Platform

Lefferts; Miami (FL); On-site; USD 140,000 - 210,000; Full time

Job summary

Lefferts seeks a Systems Architect focused on building and operating a scalable AWS EKS platform for a multi-tenant parking SaaS on AWS. You will own infrastructure design, Kubernetes operations, security, observability, and CI/CD foundations to support Node.js services and real-time workloads.

The role emphasizes platform-centric responsibilities with no application development. Strong experience with AWS, Terraform, and production Kubernetes is required, with preferred exposure to Node.js

Qualifications

• 8+ years in systems architecture, platform, or DevOps roles.
• 3+ years running Kubernetes in production, preferably Amazon EKS.
• Deep AWS expertise: VPC, IAM, EKS, RDS, S3, ElastiCache, Route 53, ALB, KMS.
• Strong Terraform and CI/CD experience.
• Strong networking and Linux fundamentals.
• Experience with Node.js / Express platforms (preferred).
• Experience with webhook-heavy systems (e.g., Stripe) (preferred).
• Experience with real-time ingestion or event-driven workloads (preferred).
• Experience migrating from serverless platforms to Kubernetes (preferred).

Responsibilities

• Design and operate a production-grade AWS foundation and EKS environment.
• Configure node groups, autoscaling, cluster upgrades, and capacity planning.
• Implement ingress, TLS, DNS management, and namespace isolation.
• Manage secrets with AWS Secrets Manager / SSM integrated with Kubernetes.
• Design and operate RDS PostgreSQL (multi-AZ, encrypted, backups, PITR).
• Architect S3 storage with lifecycle policies and access controls.
• Implement ElastiCache (Redis) for caching and background processing.
• Build Infrastructure-as-Code using Terraform (preferred).
• Implement CI/CD pipelines for container build, security scanning, and EKS deployment.
• Define environment strategy and safe promotion/rollback.
• Design least-privilege IAM and network security architecture.
• Implement metrics, logs, and tracing (CloudWatch, Prometheus, Grafana, OpenTelemetry).
• Define SLOs, alerts, and incident response runbooks.
• Architect disaster recovery and backup strategies.

Tools

Terraform

Kubernetes

CI/CD

Linux fundamentals

Networking

Job description

Job Title: Systems Architect - AWS EKS Platform

Department: Engineering / Technology

Reports To: CTO / Head of Engineering

FLSA Status: Exempt

SUMMARY

AM Parking is building an enterprise-grade, multi-tenant parking SaaS platform on AWS and is seeking a Systems Architect focused exclusively on platform and infrastructure. This role is responsible for designing, building, and operating the company's Amazon EKS (Kubernetes) environment and underlying AWS infrastructure.

This position is strictly platform-focused and does not include application development responsibilities. The Systems Architect will own AWS infrastructure design, Kubernetes operations, security, observability, and CI/CD foundations required to support Node.js services, real-time ingestion workloads, and enterprise SLAs.

RESPONSIBILITIES

• Design and implement a production-grade AWS foundation (VPC, subnets, routing, NAT, security groups, IAM)
• Architect and operate Amazon EKS (no ECS) using best practices
• Configure node groups, autoscaling, cluster upgrades, and capacity planning
• Implement ingress (AWS Load Balancer Controller), TLS, and DNS management
• Design Kubernetes namespace isolation, RBAC, pod security standards, and IRSA
• Implement secrets management using AWS Secrets Manager / SSM integrated with Kubernetes
• Design and operate RDS PostgreSQL (multi-AZ, encrypted, backups, PITR)
• Architect S3 storage for application assets with lifecycle, encryption, and access controls
• Implement ElastiCache (Redis) for caching and background processing
• Build full Infrastructure-as-Code using Terraform (preferred)
• Implement CI/CD pipelines for container build, security scanning, and EKS deployment
• Standardize Helm/Kustomize deployment patterns
• Define environment strategy (dev/stage/prod) with safe promotion and rollback
• Design least-privilege IAM and network security architecture
• Implement metrics, logs, and tracing (CloudWatch, Prometheus, Grafana, OpenTelemetry)
• Define SLOs, alerts, and incident response runbooks
• Architect disaster recovery and backup strategies

LANGUAGE SKILLS

• Ability to read, analyze, and interpret technical documentation, architecture diagrams, and system requirements
• Ability to write technical documentation, runbooks, and standard operating procedures
• Ability to effectively communicate complex infrastructure concepts to engineering and leadership teams

REASONING ABILITY

• Ability to apply advanced technical expertise to design scalable, secure, and reliable systems Ability to troubleshoot complex infrastructure and performance issues across distributed systems Ability to interpret a variety of technical instructions in written, diagrammatic, or oral form

PHYSICAL DEMANDS

• The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions
• While performing the duties of this job, the employee is regularly required to sit for prolonged periods and talk or listen.
• The employee frequently is required to use their hands to finger, handle, or feel. The employee is occasionally required to reach with hands and arms.
• Specific vision abilities required by this job include close vision and color vision
• Able to lift up to 15 pounds at time

WORK ENVIRONMENT

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. This job is performed in an office environment with a moderate noise level.

We are an EEO Company that provides a competitive salary and comprehensive benefits package to all full-time regular Employees.

The above job description describes the primary duties and qualifications for this position. The company reserves the right to modify, add, or remove duties and other duties as necessary.

The candidate for this position is an at-will employee and subject to termination with or without cause or notice.

QUALIFICATIONS

• 8+ years in systems architecture, platform, or DevOps roles
• 3+ years running Kubernetes in production, preferably Amazon EKS
• Deep AWS expertise: VPC, IAM, EKS, RDS, S3, ElastiCache, Route 53, ALB, KMS
• Strong Terraform and CI/CD experience
• Strong networking and Linux fundamentals
• Proven experience operating production systems with uptime and security requirements
• Experience supporting Node.js / Express platforms (preferred)
• Experience with webhook-heavy systems (e.g., Stripe) (preferred)
• Experience with real-time ingestion or event-driven workloads (preferred)
• Experience migrating from serverless platforms to Kubernetes (preferred)