Logo
Rapid Eagle Inc

AWS Architect

Rapid Eagle Inc, Sunnyvale

Save Job

Join to apply for the AWS Architect role at Rapid Eagle Inc.

San Mateo, CA | $180,000.00–$210,000.00

Benefits

  • 401(k) matching
  • Dental insurance
  • Health insurance

Key Responsibilities

  • Own the end‑to‑end cloud architecture and security posture for the MVP, translating requirements into a pragmatic, production‑ready design that can be delivered by a small, focused team (2× Cloud Engineers, DevOps Engineer).
  • Lead architecture decisions, risk trade‑offs, and go‑live readiness.
  • Architecture ownership: Map requirements to AWS managed services; maintain Architecture.md and decision records (ADRs).
  • Content delivery: Design CloudFront with Origin Access Control (OAC), Origin Shield, cache policies, WAF baseline, and short‑TTL signed URLs (Key Groups).
  • Storage & data: Define S3 buckets with versioning, lifecycle, KMS; enable Multi‑Region Access Point (MRAP) for read path; DynamoDB schema and Global Tables for metadata.
  • Services: Guide API Gateway + AWS Lambda patterns (metadata‑service, upload‑service with multipart + checksum, link‑service issuing signed URLs) with JWT authorizers.
  • Identity: Integrate Salesforce Partner Portal SAML with Amazon Cognito (User Pool as SP); internal admin SSO via IAM Identity Center; token/claims design and session security.
  • Security: Enforce least‑privilege IAM, KMS multi‑Region keys, Secrets Manager/SSM, TLS policies, WAF managed rules and suppressions.
  • Observability: CloudFront logs → Kinesis Firehose → S3; CloudTrail (incl. S3 data events); CloudWatch metrics, dashboards, and alarms.
  • DR & reliability: Propose RTO/RPO; enable DynamoDB PITR; plan MRAP read‑path failover drill; create runbooks for failover/rollback.
  • Performance & scale: Tune large‑file handling (multipart, range, resume), cache hit ratios, and edge performance; guide load testing targets.
  • Cost & sustainability: Set cache and lifecycle strategies; review cost reports; recommend optimizations post‑MVP.
  • Delivery leadership: Sequence scope for a 12‑week plan; de‑risk critical paths; partner with DevOps on Terraform modules, CI/CD, and environment promotion gates.

Minimum Qualifications

  • 8+ years hands‑on with AWS; proven lead/architect on production systems.
  • Deep expertise in: CloudFront (OAC, signed URLs, WAF), S3 (versioning, lifecycle, MRAP), DynamoDB (Global Tables, PITR), API Gateway, Lambda, Cognito (SAML SP), IAM & Identity Center.
  • Multi‑account Organizations experience (OUs, SCPs, baselines) and OIDC‑based CI/CD.
  • Strong Terraform design for multi‑region/multi‑account, with immutable deployments and drift detection.
  • Security best practices: KMS, Secrets Manager, SSM, WAF, TLS, least‑privilege IAM policy design.
  • Observability setup: CloudTrail, CloudWatch, structured logging, alarms, and metrics for SLOs.
  • Excellent written architecture artifacts and stakeholder communication.
  • Preferred qualifications:
    1. Large‑object distribution performance (range/resume, Origin Shield tuning, cache key strategies).
    2. Additional relevant experience not listed.

Seniority level

Mid-Senior level

Employment type

Full‑time

Job function

Engineering and Information Technology

Industries

IT Services and IT Consulting

#J-18808-Ljbffr