W2 - DevOps Lead​/DevOps Arch Plano and Charlotte

Opening For Architect

W2 Only
- Opening for Architect - AWS / RDS / Dev Ops / Terraform

Location:

Plano, TX or Charlotte, NC (open to both locations)

Employment Type:

Contract 3 days onsite work required This role is 1.5 year contract and 3 days onsite work required If on visa we can transfer, candidate must be able to work on our W2 - Please email resume with below information:

• Your current location (City & State)
• Would you need visa transfer in future
• Can you work on our W2

Key

Skills:

• Experience and expert with AWS Architecture
• Deep knowledge of AWS database services (e.g., RDS / Aurora, DynamoDB, Document DB, Elasti Cache, Open Search) including HA/DR patterns, performance, and cost optimization.
• Terraform skills
  - Responsible to design End to End solution for AWS Database products via Infrastructure as code through Terraform
• IAM
• Github/Bitbucket /Jenkins / XLR/ Code Pipeline Hands-on experience in building Terraform modules and CI/CD experience using Terrafrom enterprise:
• Experience with AWS Architecture with strong knowledge on Database products/ IAM/ Network
• Hands-on experience with Terraform, Strong CI/CD experience with Bitbucket/Terraform Enterprise.
• Ansible Playbook experience is plus
• Proven Terraform hands-on experience (7 years) building reusable IaC modules, managing state, work spaces, remote backends, and environment promotion patterns.
• Terraform Enterprise (TFE) experience: workspace design, policy-as-code (Sentinel/OPA where applicable), variable management, VCS-driven workflows, and run governance.
• Strong CI/CD implementation experience integrating Bitbucket pipelines (or Bitbucket + runners) to automate Terraform plans/applies with quality gates and approvals:
• Hands-on IAM expertise: designing least-privilege access, IAM roles/policies, permission boundaries, SCPs, cross-account access, and federation/SSO integration.
• Strong AWS networking skills: VPC design, subnets, route tables, NAT/IGW, Transit Gateway, VPC endpoints/Private Link, security groups/NACLs, DNS (Route 53), and hybrid connectivity (VPN/Direct Connect).
• Security and compliance mindset: encryption (KMS), secrets management (Secrets Manager/Parameter Store), auditability (Cloud Trail), logging/monitoring (Cloud Watch)
• Automation tooling experience (Plus):
  Ansible playbooks for configuration automation, orchestration, and post-provisioning tasks in hybrid/cloud environments.