Sr. AWS Consultant

Job Title: Sr. AWS Consultant
 
Location is open to the client's offices in: San Francisco, Arlington, VA, Denver, CO, Chicago, Boston, NYC, Houston, Miami, Los Angeles, Seattle, Dallas, Minneapolis, Minn, Atlanta, GA Birmingham, MI or Irvine, CA - 2-3 days a week onsite
Length: 6-10 months
 
 
Job Description

This Staff Consultant role builds automation, CI/CD, Infrastructure-as-Code and operational runbooks for AWS delivery. The consultant is expected to operate as an embedded AWS SME, provide hands-on implementation support, and create audit-ready technical documentation aligned to regulated Financial Services delivery expectations.

Role Scope & Key Responsibilities

Required knowledge: Expertise in Prometheus, Grafana, and Kubernetes observability/monitoring

Understanding of OpenTelemetry standards.

Nice to have: hands-on experience with Splunk, Zabbix, Dynatrace

AWS Skills & Services (added)

Core Observability & Monitoring:

Amazon CloudWatch: Deep expertise in metrics, logs, alarms, dashboards, and CloudWatch Container Insights for EKS/Kubernetes monitoring

Amazon Managed Service for Prometheus (AMP): Hands-on experience deploying, configuring, and managing Prometheus workspaces; integrating with EKS clusters

Amazon Managed Grafana (AMG): Proficiency in creating dashboards, configuring data sources (CloudWatch, AMP, X-Ray), and implementing role-based access

AWS X-Ray: Understanding of distributed tracing, service maps, and integration with containerized applications

Amazon CloudWatch Logs Insights: Advanced query capabilities for log analysis and troubleshooting

 

Container & Orchestration:

Amazon Elastic Kubernetes Service (EKS): Strong knowledge of EKS cluster management, node groups, IRSA (IAM Roles for Service Accounts), and observability add-ons

Amazon Elastic Container Service (ECS): Understanding of container monitoring patterns and CloudWatch integration

AWS Fargate: Experience with serverless container monitoring strategies

 

OpenTelemetry Integration:

AWS Distro for OpenTelemetry (ADOT): Hands-on experience deploying ADOT Collector on EKS/ECS, configuring exporters for CloudWatch, AMP, and X-Ray

OpenTelemetry standards implementation: Traces, metrics, and logs collection using OTEL SDKs and collectors in AWS environments

 

Infrastructure & Automation:

AWS CloudFormation / Terraform: Infrastructure-as-Code for deploying monitoring stacks

Amazon EventBridge: Event-driven monitoring and alerting workflows

AWS Systems Manager: Parameter Store for configuration management, Session Manager for troubleshooting

Amazon SNS/SQS: Alert notification and event processing pipelines

 

Security & Compliance:

AWS IAM: Fine-grained access control for monitoring services, service accounts, and cross-account access

AWS Secrets Manager: Secure credential management for monitoring integrations

AWS KMS: Encryption for logs and metrics data

 

Networking & Performance:

Amazon VPC: Understanding of VPC Flow Logs, network monitoring, and service mesh observability

AWS PrivateLink: Secure connectivity for monitoring services

Elastic Load Balancing (ALB/NLB): Access logs and performance metrics analysis

 

 

AWS CodePipeline, CodeBuild, CodeDeploy, GitHub Actions and GitOps workflows

AWS Systems Manager, Step Functions, Python/Bash automation and operational runbooks

 

Nice to have Skills

Amazon OpenSearch Service: Log aggregation and analysis (complementary to Splunk experience)

AWS Lambda: Serverless monitoring and custom metric collection

Amazon Kinesis: Real-time log and metric streaming

AWS Config: Configuration compliance monitoring

Amazon GuardDuty / Security Hub: Security monitoring integration

AWS Cost Explorer: Cost monitoring and optimization for observability infrastructure

Amazon Timestream: Time-series data storage for high-volume metrics

Financial Services & Industry Skills (added)

Large regulated financial-services delivery with formal change-control, audit and risk governance

Operational resilience expectations including RTO/RPO, multi-region DR and evidence for audit review

Awareness of applicable controls and regulations such as DORA, NIST CSF 2.0, PCI DSS, SEC cyber rules, RegSCI and SIFMU/FMI expectations where relevant

Ability to create Tech Risk-ready documentation including ADRs, runbooks, design docs, threat models and validation evidence

Clear communication with client engineering, security, SRE, data and platform stakeholders as an embedded SME

Certifications / Qualifications

AWS Certified DevOps Engineer - Professional

AWS Certified Solutions Architect - Associate / Professional

HashiCorp Terraform Associate / CKA preferred

General Requirements

5+ years of relevant hands-on delivery experience at L5 scope

Prior delivery in a large regulated enterprise environment, preferably financial services

Ability to write architecture decision records, design documents, runbooks and test evidence for client Tech Risk review

Strong stakeholder communication across engineering, security, operations, SRE and delivery teams

Compliance with AWS ProServe and client onboarding, security, vetting and time-zone overlap requirements