AWS Cloud Architect (ETL & Terraform)
A hands-on AWS Cloud Architect who owns a multi-account AWS platform, the Terraform/OpenTofu infrastructure codebase, and the ETL/data pipeline layer feeding a lakehouse and ML services for a US automotive-retail client. Daily work includes writing Terraform, building Glue pipelines, and designing network, security, and data architecture.
- Compensation
- Not disclosed
- Location
- Kansas City
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Architecture
- Posted
Skills
Must have
- 5+ years in cloud engineering with at least 4 years focused on AWS architecture
- Expert-level Terraform or OpenTofu (module authorship, state strategy, multi-account patterns)
- Multi-account AWS design experience (Organizations, Control Tower, SCPs, Transit Gateway, IAM Identity Center)
- Hands-on ETL/data engineering using AWS Glue, Spark, Step Functions, and Python
- Experience designing data lakes/lakehouses, incl. Bronze/Silver/Gold architecture and Lake Formation governance
- Deep serverless experience with Lambda, API Gateway, EventBridge, SQS/SNS, and Aurora Serverless
- Strong SQL and relational data modeling, incl. performance tuning on Aurora or similar
- Strong security architecture knowledge: IAM, KMS, network segmentation, AWS security services
- Ability to write clear technical design documents engineers can implement without clarification
Nice to have
- Terragrunt experience
- Databricks and Delta Lake production experience
- EKS design and migration experience, incl. EC2-to-container migration with minimal downtime
- Experience with streaming and CDC tools such as Kinesis, MSK, DMS, or Debezium
- Automotive retail data integration experience (Tekion, CDK, Reynolds, Dealertrack, VinSolutions, or similar DMS/CRM)
- PCI DSS scoping and compliance architecture experience
- AWS certifications (Solutions Architect – Professional, Data Engineer, or Security Specialty)
- Experience supporting ML and RAG workloads, including vector store design
Full description
Compensation: No equity
*This is a remote position.
Join one of the Philippines' fastest-growing tech companies! Open to Philippine-based candidates only.
Company Overview
Full Scale is a tech services company that helps businesses build dedicated teams of skilled software engineers. We make finding and retaining experienced software talent easy and affordable.
Position Summary
We are looking for an AWS Cloud Architect to join our growing team and serve as the technical authority on a multi-account AWS platform built for scale. You will own the cloud architecture, the Terraform/OpenTofu module ecosystem, and the ETL and data pipeline layer that feeds a lakehouse and ML services for a US-based client in the automotive retail space. This is a hands-on architecture role — not a slide-deck role. You will write Terraform, build Glue jobs, debug VPC route tables, and own the standards that make the platform scale across multiple business units. You will partner with a DevOps Engineer (who operates what you design) and a Data Scientist (whose models depend on the data you make available and trustworthy).
Key Responsibilities
- Own the multi-account AWS Organization design: OU structure, account vending, Service Control Policies, Control Tower guardrails, and IAM Identity Center for SSO.
- Own network architecture — Transit Gateway hub-and-spoke, VPC design and segmentation, PrivateLink, DNS, and cross-account connectivity — designed for multi-region and multi-tenant growth.
- Design the security architecture and keep it coherent as services multiply: IAM boundaries and least privilege, KMS key strategy, org-wide CloudTrail, GuardDuty/Security Hub/Inspector/Macie, and WAF/Shield at the edge.
- Define reference architectures and standards for new services so the tenth service built looks like the first. Author and maintain architecture documentation.
- Lead the EKS adoption path: Fargate vs. managed node groups, IRSA, cluster networking, and which workloads belong in containers vs. staying serverless.
- Own AWS Well-Architected reviews and drive remediation. Own cloud cost architecture — tagging strategy, chargeback by workload, and commitment planning.
- Own the Terraform/OpenTofu codebase end to end: module design, versioning, registry strategy, state management, and Terragrunt configuration across environments and accounts.
- Enforce IaC quality through policy-as-code (OPA/Sentinel or equivalent), automated plan review, drift detection, and remediation.
- Eliminate console-created resources — everything that exists should exist in code.