AWS Architect || Toronto, ON - Onsite || Fulltime FTE.

AWS Architect

Location: Toronto, ON
Work Model: Onsite
Fulltime FTE - Permanent

Job Summary

We are seeking an experienced AWS Architect to design, implement, and support enterprise-scale AWS cloud infrastructure. The ideal candidate will have strong hands-on expertise in AWS networking, architecture, disaster recovery, security, IAM, Infrastructure as Code, DevOps, system administration, and cloud cost optimization . The candidate should be comfortable working across both Windows and Linux environments and have experience supporting highly available, secure, and resilient AWS workloads.

Key Responsibilities

AWS Architecture & Networking

• Design, implement, and support highly available, fault-tolerant AWS cloud architectures .

• Optimize AWS infrastructure for performance, scalability, reliability, and workload efficiency.

• Design and manage advanced AWS networking, including:

  • VPC

  • Transit Gateway (TGW)

  • VPN

  • VPC Endpoints

  • AWS PrivateLink

  • VPC Peering

  • Route Tables

  • Network ACLs (NACLs)

  • Subnetting and CIDR management

• Configure and manage Application Load Balancers (ALB) and Network Load Balancers (NLB) .

Disaster Recovery & Business Continuity:

• Design and implement AWS-native Disaster Recovery (DR) solutions aligned with business RTO/RPO requirements.

• Implement replication and backup solutions using:

  • AWS Elastic Disaster Recovery (AWS DRS/EDR)

  • AWS Backup

  • Amazon S3 Multi-Region Access Points (MRAP)

  • RDS Cross-Region Replication

  • Amazon Redshift Cross-Region Replication

• Lead and support cross-region DR testing and recovery exercises , including restoration into us-east-1 .

Security, IAM & Governance:

• Manage and support:

  • AWS IAM

  • AWS Identity Center

  • AWS Control Tower

  • AWS Landing Zone

• Implement multi-region AWS KMS encryption and key management.

• Analyze and remediate AWS Security Hub findings.

• Implement compliance controls using AWS Config .

• Enforce AWS resource tagging, governance, and security standards.

DevOps & Infrastructure Automation:

• Provision and manage infrastructure using Terraform and/or AWS CloudFormation .

• Design and maintain CI/CD pipelines using GitLab or similar Git-based tools.

• Configure and manage GitLab Runners .

• Automate configuration and deployment using Ansible .

• Manage Git repository governance, including:

  • Branching strategies

  • Repository permissions

  • Code promotion

  • Pull Request reviews

System Administration & Cloud Operations:

• Perform system administration, troubleshooting, and resource provisioning across Windows and Linux environments.

• Manage vulnerability assessments and monthly OS patching cycles .

• Provision and manage AWS services for AI and data workloads , including:

  • Amazon Bedrock

  • Amazon SageMaker

  • EC2 / standard compute services

• Provide basic troubleshooting support for AWS Lambda functions and AWS Glue jobs.

Cost Optimization & Monitoring:

• Analyze AWS cost and utilization data to identify cloud cost optimization and savings opportunities .

• Prepare weekly and monthly AWS billing, utilization, and cost reports for management.

• Build and maintain customized Amazon CloudWatch dashboards for infrastructure monitoring and observability.

Required Technical Skills

• AWS Architecture & Cloud Infrastructure

• AWS VPC, Transit Gateway, VPN, PrivateLink, VPC Endpoints

• ALB / NLB

• Subnetting, CIDR, Route Tables, NACLs

• AWS Disaster Recovery, RTO/RPO

• AWS Backup, AWS DRS/EDR

• S3 MRAP, RDS/Redshift Cross-Region Replication

• AWS IAM, Identity Center, Control Tower, Landing Zone

• AWS KMS, Security Hub, AWS Config

• Terraform / CloudFormation

• GitLab CI/CD & GitLab Runners

• Ansible

• Windows & Linux Administration

• Vulnerability Management & Patching

• CloudWatch & AWS Monitoring

• AWS Cost Optimization

• Amazon Bedrock / SageMaker

• AWS Lambda / Glue

Preferred Qualifications

• Experience designing enterprise-scale AWS landing zones and multi-account environments .

• Strong understanding of AWS Well-Architected Framework principles.

• Experience with highly available and multi-region AWS architectures .

• Strong troubleshooting, documentation, communication, and stakeholder management skills.

• Ability to work in an onsite environment in Toronto, ON .

Ideal Candidate

The ideal candidate is a hands-on AWS Architect with deep expertise in AWS networking, multi-region architecture, DR, security/governance, Terraform, CI/CD, and cloud operations , capable of designing solutions while also supporting implementation, troubleshooting, automation, and optimization.