Aws Certified Cloud Solutions Architect

**AWS CERTIFIED CLOUD SOLUTIONS ARCHITECT**

**ENGINEERING TEAM / GLOBAL COMPANY**

This **Remote position** offers the flexibility to work from **anywhere in Mexico**. Occasional travel may be required for key meetings, conferences, or team events.

We’re looking for a pragmatic **AWS Certified Cloud Solutions Architect** who can **plan, build, and operate** a secure, cost-efficient, well-monitored AWS environment with **mínimal downtime**. You’ll execute a clear roadmap covering security hardening, cost optimization, observability, CI/CD, Infrastructure-as-Code, multi-account landing zone, and containerization—**working closely with the CIO (Infrastructure) and CTO (Development) departments** and documenting as you go.

**RESPONSIBILITIES**:
**Plan & Coordinate**
- Break initiatives into epics/stories/tasks and sequence work to avoid downtime.
- Prepare change plans with rollback steps; communicate maintenance windows and outcomes.
- Coordinate delivery and handoffs across CIO (Infra) and CTO (Dev) teams.

**Build & Migrate (Hands-On)**
- Implement **Infrastructure as Code (IaC)** for core AWS services (networking, compute, load balancing, data stores, identity).
- Set up and maintain **CI/CD** for safe, repeatable deployments.
- Containerize services where appropriate (Docker, ECS/EKS) and run blue/green or rolling releases.

**Harden & Operate**
- Improve **reliability**: RDS Multi-AZ, backups/DR, endpoint policies, health checks.
- Strengthen **observability**: metrics/logging, dashboards, actionable alarms; integrate with an APM/observability platform if needed.
- Drive **cost optimization**: right-size compute/databases, storage optimizations, commitment discounts, off-hours schedules, S3 lifecycle.
- Establish **multi-account** guardrails (Organizations/Control Tower or equivalent) and tagging standards.

**Document & Enable**
- Produce runbooks, diagrams, and “how-to” guides (onboarding, incident response, deployments).
- Report progress against SLAs/SLOs, budgets, and security posture.

**REQUIREMENTS**
- **AWS Certification required** (Associate level or higher).
- 3-7+ years in cloud/DevOps/SRE roles (or equivalent projects).
- Demonstrated delivery of **zero/low-downtime** changes in production.
- Demonstrated ability to lead and contribute to complex projects.
- Must be **English fluent,** written and verbal communication skills **(B2, C1, Advanced level)**
- **AWS core**: VPC, subnets/NAT/endpoints, ALB, EC2, S3, RDS/Aurora, ElastiCache, CloudWatch, IAM.
- **Security hygiene**: IAM roles/policies, SSO/Identity Center basics, encryption at rest, WAF fundamentals.
- **IaC**: Comfortable implementing infra using **an IaC tool of choice** (modules/reuse, remote state, code reviews).
- **CI/CD**: Experience with **a mainstream CI/CD platform** and pipelines (build, test, deploy, approvals).
- **Containers**: Docker fundamentals; ECS or EKS exposure (ECS preferred is fine).
- **Ops**: Change management, maintenance windows, rollback planning, incident handling.
- **Scripting**: Bash and at least one of Python/TypeScript/PowerShell for automation.
- **Communication & Documentation**: Clear runbooks, concise tickets, and stakeholder updates.

**TOOLS YOU´LL LIKELY TOUCH**:

- AWS services across networking, compute, databases, storage, identity, security, observability.
- **IaC tool of choice** (the stack is flexible).
- **CI/CD platform of choice** (AWS-native or external).
- An observability platform (your choice) and standard ticketing/collab tools.

**SOFT SKILLS**:

- **Collaborative mindset**:Willingness to work closely with team members and share knowledge to achieve common goals.
- **Self-discipline and time management**:Capacity to prioritize tasks and meet deadlines while working remotely.
- **Commitment and sense of urgency**:Demonstrated accountability, reliability, and responsiveness in handling assigned responsibilities.
- Demonstrated ability to work in a diverse and equitable environment.

**BONUS SKILLS (HIGHLY PREFERRED BUT NOT REQUIRED)**:

- Multi-account landing zones (Organizations/Control Tower), SCPs, tag policies.
- Database migrations (e.g., MariaDB → Aurora MySQL) using DMS or native tools.
- Observability platforms (APM/logs/metrics) and log pipelines.
- Performance and load testing basics (p95 latency, capacity planning).

**WHAT SUCCESS LOOKS LIKE**:

- Foundational security services enabled and tuned; SSH removed in favor of SSM.
- Cost reduced via right-sizing and storage/network optimizations—**without** performance loss.
- IaC coverage for core infra; safe CI/CD with approvals and rollbacks.
- Actionable dashboards/alerts and clear runbooks.
- Multi-account guardrails and tagging standards in place.
- No unplanned downtime during planned changes.

**WE OFFER**:
USD 3,100 per month (as a contractor)

Great teamwork

Work culture and environment are based on communication, trust, and hard work.

A career in a Global Company

Travel Opportunities

Paid Time Off

Holiday