About the position
Bright Vision Technologies is seeking an experienced AWS Solutions Architect to design, build, and operate large-scale, secure, and highly available cloud platforms on Amazon Web Services. This is a hands-on engineering role spanning architecture, infrastructure-as-code, automation, security, observability, and continuous operational improvement of mission-critical production workloads. The role calls for strong knowledge of AWS services, DevOps fundamentals, and cost-aware design, and partners with application, security, and SRE teams to deliver resilient cloud-native solutions that scale with the business.
The position is 100% remote in the U.S., full-time, and direct W2, with an annual salary range of \$100,000–\$150,000. Candidates must be eligible to work in the U.S.; U.S. citizens, Green Card holders, EAD holders, and H-1B transfer candidates are encouraged to apply. The company cannot sponsor new H-1B visa petitions for this position.
Responsibilities
- Architect, deploy, and operate enterprise-grade AWS environments across compute, networking, storage, identity, and managed data services, emphasizing scalability, reliability, and security.
- Author and maintain production-quality infrastructure-as-code using Terraform, AWS CloudFormation, or AWS CDK, with version control, peer review, and automated validation.
- Design multi-account AWS organizations, including landing zones, SCPs, centralized logging, and shared services.
- Build secure VPC topologies, including subnetting, route tables, transit gateways, VPN, and Direct Connect integrations.
- Implement IAM strategies using roles, permission boundaries, SCPs, AWS SSO, and short-lived credentials to enforce least-privilege access.
- Design, deploy, and operate Amazon EKS clusters and other container platforms, including ECS and Fargate, with auto-scaling, networking, service mesh, and observability integrations.
- Operate AWS managed data and analytics services such as RDS, Aurora, DynamoDB, S3, Redshift, Glue, and Kinesis, optimizing them for workload access patterns and SLAs.
- Build and maintain CI/CD pipelines using AWS CodePipeline, CodeBuild, Jenkins, GitHub Actions, or GitLab CI for repeatable, audited infrastructure and application deployments.
- Implement observability with CloudWatch, X-Ray, AWS Distro for OpenTelemetry, Prometheus, Grafana, and third-party tooling, including dashboards, alerts, and SLOs.
- Drive cost optimization through right-sizing, savings plans, reserved instances, lifecycle policies, and architectural simplification, tracking measurable savings over time.
- Implement disaster-recovery and business-continuity capabilities, including cross-region replication, automated backups, failover testing, and documented runbooks.
- Strengthen security using AWS Security Hub, GuardDuty, Macie, Inspector, Config, and CloudTrail, and lead remediation of findings with security teams.
- Advise application development teams on AWS-native design patterns, anti-patterns, and service choices.
- Develop automation scripts and operational tooling in Python, Bash, and Go to streamline routine work and accelerate incident response.
- Mentor junior engineers, lead architecture and design reviews, and contribute cloud thought leadership within the organization.
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
- Five or more years of cloud engineering experience, including at least three years focused on AWS in production environments.
- Strong hands-on experience with AWS core services, including EC2, VPC, IAM, S3, RDS, Lambda, CloudFront, and CloudFormation.
- Production-grade experience with infrastructure-as-code tools such as Terraform, AWS CDK, or CloudFormation.
- Experience designing and operating Amazon EKS or ECS clusters at scale.
- Hands-on experience with CI/CD pipelines for infrastructure and application workloads.
- Strong scripting skills in Python and Bash.
- Deep understanding of cloud security, IAM, encryption, key management, and compliance requirements.
- Experience implementing observability, monitoring, and alerting in cloud-native environments.
- Strong troubleshooting, communication, and documentation skills.
Nice-to-haves
- AWS Certified Solutions Architect – Professional or DevOps Engineer – Professional certification.
- Experience with multi-account AWS Organizations and centralized governance.
- Familiarity with service mesh, eBPF-based observability, and zero-trust networking.
- Exposure to FinOps practices and well-architected cost-optimization frameworks.
- Experience operating regulated workloads, including HIPAA, PCI-DSS, SOC 2, or FedRAMP.
- Familiarity with Go or PowerShell.
