• Act as the primary owner for the PatientKeeper Windows server environment (including legacy versions back to 2012), performing configuration, maintenance, and troubleshooting. • Manage day-to-day configuration, monitoring, and maintenance of Cisco ASA firewalls and Cisco switching/routing infrastructure, including building and maintaining site-to-site and client VPN tunnels with customer networks. • Be responsible for the Active Directory infrastructure, including the design and setup of new Active Directory network configurations and ensuring accurate Windows DNS functionality. • Provide administration and operational support for the Oracle DBA environment used by the PatientKeeper product. • Work across teams to maintain security policies and ensure the integrity of the internal access management directory.

• Provide your expertise on Microsoft environments (Windows, O365, MECM/SCCM) • Actively participate in the design and optimization of desktop/workstation architectures • Contribute to the success of a strategic, large-scale project • Lead and perform desktop/workstation migrations as part of the project • Define, challenge and implement the associated infrastructure architectures • Manage, monitor and optimize the Windows / Microsoft O365 environment • Collaborate with technical and business teams to align solutions with requirements • Proactively propose solutions to anticipate and resolve technical issues

• Design, implement, and manage cloud infrastructure on AWS • Establish and maintain AWS environment, including account structure, networking, security, and governance frameworks

• Design and implement AWS account structure using AWS Organizations • Create and manage Organizational Units (OUs) based on business requirements and best practices • Establish account governance policies and standards • Implement consolidated billing and cost allocation strategies • Deploy and manage AWS Control Tower for automated account provisioning and governance • Implement Landing Zone Architecture (LZA) for scalable, secure multi-account environments • Design and deploy Virtual Private Clouds (VPCs) across multiple regions • Configure and manage VPN connections (Site-to-Site VPN and Client VPN) • Implement AWS Direct Connect for hybrid cloud connectivity • Design network segmentation strategies using subnets, route tables, and network ACLs • Configure Transit Gateway for multi-VPC connectivity • Manage DNS using Route 53 • Architect network solutions for AWS GovCloud environments • Design and implement IAM policies, roles, and permission boundaries • Establish identity federation with corporate identity providers • Implement least privilege access principles • Create and manage service control policies (SCPs) at the organization level • Configure multi-factor authentication (MFA) requirements • Develop IAM governance and compliance frameworks • Design and implement security policies across the organization • Configure AWS Security Hub, GuardDuty, and AWS Config • Implement encryption strategies for data at rest and in transit • Establish security monitoring and incident response procedures • Ensure compliance with industry standards (SOC 2, ISO 27001, HIPAA, etc.) • Maintain FedRAMP compliance requirements and controls • Design and implement security architectures for AWS GovCloud (US) regions • Conduct security assessments and vulnerability management • Implement AWS WAF and Shield for application protection • Create infrastructure as code using AWS CloudFormation or Terraform • Develop and maintain architectural documentation and diagrams • Provide technical guidance and mentorship to engineering teams • Participate in disaster recovery planning and testing • Optimize cloud costs and resource utilization