Role overview

AWS Architect Key Responsibilities

1. AWS Architecture Design & Implementation

Design & Support: Architect and amend cloud infrastructure with a focus on high availability, fault tolerance, and workload optimization.
Core Networking: Administer and optimize advanced AWS networking, including VPCs, Transit Gateway (TGW), VPNs, VPC Endpoints, PrivateLink, Peering, Route Tables, and NACLs.
Traffic Management: Configure and manage Application Load Balancers (ALB) and Network Load Balancers (NLB).
IP Management: Handle VPC subnetting and CIDR block/mask administration.

2. Disaster Recovery (DR) & Business Continuity

DR Strategy: Design and implement robust DR solutions utilizing AWS native services to meet strict business RTO and RPO objectives.
Replication & Backup: Leverage AWS Elastic Disaster Recovery (EDR), AWS Backup, S3 Multi-Region Access Points (MRAP), and RDS/Redshift cross-region replication.
Cross-Region Operations: Lead upcoming DR testing initiatives to ensure infrastructure and applications seamlessly restore in the designated recovery region within established RTOs.

3. Security, Governance & Identity Management

Access Control: Manage IAM, AWS Identity Center, Control Tower, and AWS Landing Zone environments.
Data Protection: Utilize multi-region AWS Custom KMS keys for data encryption.
Compliance & Auditing: Analyze AWS Security Hub findings, drive remediation efforts, and enforce compliance using AWS Config and strict resource tagging policies.

4. DevOps, Automation & CI/CD

Infrastructure as Code (IaC): Provision and manage infrastructure using Terraform or CloudFormation.
Pipeline Management: Set up and maintain CI/CD pipelines using GitLab (or similar Git tools) and configure GitLab Runners.
Configuration Management: Utilize Ansible for automated configuration and deployment.
Repository Governance: Administer Git branching strategies, including permissions, code promotion, and pull request reviews.

5. System Administration & Operations

OS Support: Perform system administration, troubleshooting, and resource provisioning across both Windows and Linux environments.
Patching & Vulnerability: Conduct routine vulnerability assessments and manage monthly system patching cycles.
Data & AI Provisioning: Spin up and manage Amazon Bedrock, SageMaker, and standard compute instances.
L1 Troubleshooting: Support basic troubleshooting for AWS Lambda functions and AWS Glue data jobs.

6. Financial & Performance Optimization

Cost Optimization: Analyze AWS Cost Optimizer data to identify savings opportunities.
Executive Reporting: Deliver weekly and monthly billing and utilization reports for management.
Monitoring & Observability: Build custom CloudWatch Dashboards.