AWS Infrastructure Architect

 AWS Infrastructure Architect (Financial Services)

Fulltime Role -

REMOTE Anywhere in US

Position Overview

We are seeking an experienced, full-time AWS Infrastructure Architect to join our dedicated AWS Global Financial Services (GFS) team. In this remote U.S. role, you will be embedded into high-stakes environments, working directly with Top 10 Global Banks to design and deploy enterprise-grade, resilient, and highly compliant cloud landing zones. You will partner with tier-1 banking leadership to translate rigorous regulatory mandates into automated, immutable cloud topologies.

Key Responsibilities

• Enterprise Architecture Design: Architect multi-region, multi-account enterprise AWS landing zones using AWS Control Tower, AWS Organizations, and custom Service Control Policies (SCPs) tailored to complex financial enterprise structures.
• Security & Compliance Realization: Build architectures that natively satisfy SOC2, PCI-DSS, ISO 27001, and Federal Reserve/SEC compliance frameworks. Implement advanced edge security, encryption-at-rest/in-transit, KMS management, and AWS Network Firewall topologies.
• Infrastructure as Code (IaC): Establish global, repeatable patterns using production-grade Terraform, OpenTofu, or AWS CDK, strictly adhering to GitOps principles.
• Resiliency & DR Design: Architect high-availability (HA) and disaster recovery (DR) frameworks capable of meeting strict RTO/RPO requirements for critical financial transaction systems across multiple Availability Zones and AWS Regions.
• AWS ProServe Delivery: Act as an embedded subject matter expert within AWS Professional Services delivery squads, ensuring flawless execution against client milestones.

Required Qualifications

• Experience: 10+ years of IT engineering experience, with 4+ years dedicated to enterprise AWS architecture.
• Domain Expertise: Minimum 3 years working directly within Financial Services (Banking, Trading, FinTech, Payments, or Insurance). Deep familiarity with financial compliance architectures and data sovereignty.
• Technical Deep Dive: Advanced mastery of AWS Networking (VPC, Transit Gateway, PrivateLink), IAM (Resource policies, ABAC/RBAC, boundary policies), and monitoring (CloudTrail, GuardDuty, AWS Config).
• Certifications: AWS Certified Solutions Architect – Professional (Required). AWS Certified Security – Specialty (Highly Preferred).
• Location: 100% Remote (Based anywhere in the US).