AWS GenAI Lead Security & Governance

Job Title: AWS GenAI Lead Security & Governance

Level: Senior Engineer Cloud & Infrastructure Management

Experience: 10 15 Years

Location: Tampa, Florida, USA Princess Palm Ave (onsite)

Employment Type: Permanent Fulltime

Job Summary

We are seeking an experienced AWS GenAI Lead Security & Governance with 10+ years of experience in AWS Cloud Infrastructure, Platform Engineering, or Cloud Architecture.

The ideal candidate will be a strong hands-on AWS Cloud Infrastructure Consultant with expertise in designing and implementing secure, scalable, highly available, and resilient cloud platforms.

The role requires deep technical expertise in AWS networking, Amazon EKS/Kubernetes, cloud observability, security, disaster recovery, multi-region resiliency, and Infrastructure as Code using Terraform.

Required Experience

10+ years of experience in:

o AWS Cloud Infrastructure

o Platform Engineering

o Cloud Architecture

o Cloud Infrastructure Consulting

Strong hands-on experience designing and implementing secure and scalable AWS platforms.

Experience with enterprise-scale AWS networking and infrastructure.

Strong experience with container platforms and Kubernetes-based environments.

Experience designing highly available and resilient multi-AZ/multi-region AWS architectures.

Strong Infrastructure as Code experience using Terraform.

Key Responsibilities

AWS Cloud Infrastructure & Networking

Design and implement secure, scalable, and resilient AWS cloud infrastructure.

Architect enterprise AWS networking using:

o Amazon VPC

o Transit Gateway (TGW)

o AWS Direct Connect

o AWS PrivateLink

o Security Groups

o Network segmentation

Design and manage multi-account AWS environments and automated account-vending processes.

Design highly available multi-AZ and multi-region architectures.

Develop secure network connectivity patterns for enterprise workloads.

Kubernetes & Amazon EKS

Design, implement, and operate Amazon EKS environments.

Provide expertise in Kubernetes architecture and container platform operations.

Design and manage service mesh networking.

Configure and optimize:

o Application Load Balancer (ALB)

o Network Load Balancer (NLB)

o Kubernetes ingress

o Auto-scaling

Establish security and operational best practices for containerized workloads.

Cloud Observability & Monitoring

Design enterprise monitoring and observability frameworks.

Implement and manage Amazon CloudWatch and AWS X-Ray.

Design centralized log aggregation and logging pipelines.

Develop monitoring strategies for infrastructure, applications, and distributed systems.

Establish dashboards, alerts, metrics, tracing, and operational visibility.

AWS Security

Design secure AWS infrastructure using strong identity, access, and network security controls.

Implement and manage AWS IAM policies and access controls.

Implement encryption and key-management strategies using AWS KMS.

Establish security best practices across AWS infrastructure and platform services.

Integrate security controls into cloud infrastructure and DevOps processes.

Resiliency & Disaster Recovery

Design enterprise disaster recovery and resiliency architectures.

Define and implement RTO/RPO requirements.

Design multi-region resiliency and failover strategies.

Conduct failover and recovery testing.

Utilize AWS resilience capabilities including:

o AWS Fault Injection Service (FIS)

o AWS Application Recovery Controller (ARC)

Identify infrastructure risks and implement resilience improvements.

Infrastructure as Code & DevOps

Design and implement AWS infrastructure using Terraform.

Develop reusable Infrastructure as Code modules and deployment patterns.

Integrate infrastructure provisioning with DevOps and CI/CD processes.

Establish automation and governance standards for cloud infrastructure.

Support secure and repeatable deployment of AWS platforms.

Mandatory Skills

AWS Networking

AWS VPC

Transit Gateway (TGW)

AWS Direct Connect

AWS PrivateLink

Security Groups

Multi-AZ Architecture

Multi-Region Architecture

AWS Infrastructure

Amazon EC2

Amazon ECS

Amazon EKS

AWS Infrastructure Services

AWS DevOps Services

Containers & Kubernetes

Amazon EKS

Kubernetes

Container Platform Operations

Service Mesh

ALB/NLB

Kubernetes Auto-scaling

Security

AWS IAM

AWS KMS

AWS Network Security

Cloud Security Architecture

Identity & Access Management

Encryption & Key Management

Observability

Amazon CloudWatch

AWS X-Ray

Log Aggregation

Logging Pipelines

Monitoring Frameworks

Distributed Tracing

Resiliency & DR

Disaster Recovery Architecture

RTO/RPO

Multi-Region Resiliency

Failover Testing

AWS FIS

AWS ARC

Infrastructure as Code

Terraform

Infrastructure as Code (IaC)

Cloud Automation

DevOps

Good to Have Skills

AWS Managed Workflows for Apache Airflow (MWAA)

AWS Step Functions

Amazon S3

AWS Transfer Family

Advanced AWS DevOps Services

Enterprise cloud platform governance