We are looking for a Cloud Architect with deep expertise in AWS to lead the design and implementation of our multi-region cloud infrastructure, transitioning from a global on-premise environment. You will architect scalable, secure, and cost-efficient solutions while guiding the engineering team on best practices in cloud architecture, infrastructure as code, and DevSecOps workflows. The ideal candidate will also bring experience designing compliant environments that meet PCI and ISO standards, and building enterprise landing zones on AWS.

QUALIFICATIONS:

• 7+ years of experience in cloud architecture with deep AWS knowledge.
• Proven experience building multi-region, highly available architectures in AWS.
• Expertise in Terraform, Terragrunt, and Ansible at scale.
• Strong Linux systems background and familiarity with database clustering (e.g., MySQL, Cassandra).
• Experience building AWS Landing Zones using Control Tower or custom automation.
• Hands-on experience designing PCI and ISO compliant environments.
• Proficient in secure networking, IAM, VPN architecture, and secrets management.
• Experience with regulated domains (e.g., FinTech, healthcare) is strongly preferred.

WHAT WE DO

Street Context is an entity of BlueMatrix. Together they develop one-of-a-kind web applications for the authoring, distribution, and analysis of investment research, and for internal knowledge management and digital communications. Our mission is to streamline the publishing process on a global scale.

• Design and implement multi-region AWS infrastructure, leveraging Control Tower, custom OU structures, and network segmentation.
• Architect and build AWS Landing Zones to support multiple entities and workload isolation.
• Build and manage reusable Terraform and Terragrunt modules to streamline IaC provisioning.
• Lead the migration of legacy systems (Cassandra, MySQL, RabbitMQ, Airflow, Tomcat) from on-prem to AWS.
• Guide the design of CI/CD pipelines integrating GitLab, Github and GoCD for application and infrastructure deployments.
• Enforce security-by-design principles, including IAM hardening, traffic segregation, and logging.
• Support Linux system architecture and design highly available database clusters.
• Define and implement best practices to meet PCI DSS, ISO 27001, and internal security policies.
• Collaborate with cross-functional teams to support operational excellence and compliance goals.