AWS Architect - Security, Governance & Identity Management, Disaster Recovery (DR) & Business Continuity

Toronto

Fully Onsite

Full time

Key Responsibilities

Design & Support: Architect and amend cloud infrastructure with a focus on high availability, fault tolerance, and workload optimization.

Core Networking: Administer and optimize advanced AWS networking, including VPCs, Transit Gateway (TGW), VPNs, VPC Endpoints, PrivateLink, Peering, Route Tables, and NACLs.

Traffic Management: Configure and manage Application Load Balancers (ALB) and Network Load Balancers (NLB)

IP Management: Handle VPC subnetting and CIDR block/mask administration.

2. Disaster Recovery (DR) & Business Continuity

DR Strategy: Design and implement robust DR solutions utilizing AWS native services to meet strict business RTO and RPO objectives.

Replication & Backup: Leverage AWS Elastic Disaster Recovery (EDR), AWS Backup, S3 Multi-Region Access Points (MRAP), and RDS/Redshift cross-region replication.

Cross-Region Operations: Lead upcoming DR testing initiatives to ensure infrastructure and applications seamlessly restore in us-east-1 within established RTOs.

3. Security, Governance & Identity Management

Access Control: Manage IAM, AWS Identity Center, Control Tower, and AWS Landing Zone environments.

Compliance & Auditing: Analyze AWS Security Hub findings, drive remediation efforts,



and enforce compliance using AWS Config and strict resource tagging policies.

4. DevOps, Automation & CI/CD

Infrastructure as Code (IaaC): Provision and manage infrastructure using Terraform or CloudFormation.

Pipeline Management: Set up and maintain CI/CD pipelines using GitLab (or similar Git tools) and configure GitLab Runners.

Configuration Management: Utilize Ansible for automated configuration and deployment.

Repository Governance: Administer Git branching strategies, including permissions, code promotion, and pull request reviews.

5. System Administration & Operations

OS Support: Perform system administration, troubleshooting, and resource provisioning across both Windows and Linux environments.

Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.

Data & AI Provisioning: Spin up and manage Amazon Bedrock, SageMaker, and standard compute instances.

L1 Troubleshooting: Support basic troubleshooting for AWS Lambda functions and AWS Glue data jobs.

6. Financial & Performance Optimization

Cost Optimization: Analyze AWS Cost Optimizer data to identify savings opportunities.

Executive Reporting: Deliver weekly and monthly billing and utilization reports for HCCA management.

Monitoring & Observability: Build custom CloudWatch Dashboards.

📌 AWS Architect (Toronto)
🏢 apptoza
📍 Toronto