Aws DevOps Architect

AWS DevOPS Architect This role requires deep expertise in both Infrastructure as Code (Terraform/Terragrunt) and configuration management (Ansible) to support a hybrid platform spanning on-prem and AWS environments. You will operate at the intersection of platform engineering, infrastructure as code, networking, and cloud governance, enabling engineering teams to build and operate reliably at scale. Key Responsibilities AWS Architecture: Design and build a scalable AWS multi-account architecture using Control Tower and AFT (Account Factory for Terraform). IaC Strategy: Lead infrastructure as code (IaC) strategy using Terraform and Terragrunt, ensuring modular, reusable, and production-grade patterns. Networking: Architect and implement hub-and-spoke networking, including Cloud WAN, VPC sharing (RAM), routing, and hybrid connectivity (VPN). Migration: Drive on-prem to AWS migration, including workload modernization and environment standardization. Configuration Management: Own and evolve Ansible-based provisioning and configuration workflows across all environments. Integration: Ensure tight integration between Terraform-provisioned infrastructure and Ansible-configured application stacks. Optimization: Refactor and standardize Ansible roles, playbooks, and inventories for scalability and maintainability. CI/CD: Build and maintain CI/CD pipelines (GitHub Actions preferred) for infrastructure provisioning and platform services. Governance: Define and enforce cloud governance (IAM, SCPs, tagging, cost controls, guardrails). Collaboration: Partner with engineering teams to onboard workloads, troubleshoot issues, and improve reliability and observability. Automation: Identify opportunities to reduce configuration drift and evolve toward more immutable infrastructure patterns where applicable. Required Technical Skills AWS (Expert-Level) Deep experience with AWS services including VPC, IAM, EC2, EKS, RDS, S3, CloudWatch, Route 53, and Load Balancers. Experience with multi-account architecture, Control Tower, and governance at scale. Infrastructure as Code (Advanced) Terraform: Advanced module design, remote state management, and scaling patterns. Terragrunt: Environment orchestration and DRY principles. Experience building reusable and production-grade infrastructure modules. Configuration Management (Critical Requirement) Strong hands-on experience with Ansible at scale. Proven ability to design and maintain Ansible roles and playbooks for: Application deployment EC2 configuration and hardening Database schema management (e.g., Flyway integration) Experience managing large and dynamic inventories across multiple environments. Networking (Advanced) Hub-and-spoke architecture design. Multi-account connectivity (VPC peering, Transit Gateway, Cloud WAN). Hybrid networking (site-to-site VPN, routing policies). Deep understanding of routing tables, CIDR planning, and IPAM. DevOps & CI/CD Experience with GitHub Actions (or similar CI/CD platforms). Strong understanding of pipeline design, approvals, and environment promotion strategies. Security & Governance IAM design (least privilege, cross-account roles). Experience with SCPs, guardrails, and policy enforcement. Secure networking and secrets management best practices