• Design, implement, and manage Azure solutions across IaaS, PaaS, and SaaS, including VMs, App Services and Networking. • Deploy and configure key Azure infrastructure services, including Azure Landing Zones, Azure Virtual Desktop, Defender for Cloud and other enterprise platforms. • Architect and deploy secure network solutions on Azure, including VNETs, VPNs, and ExpressRoute. • Implement and manage Azure storage solutions, including Blob, Queue, and Table Storage. • Develop and deploy applications using Azure App Services and integrate with other Azure services. • Utilize Azure DevOps for CI/CD pipelines, monitoring, and automation. • Implement Infrastructure as Code (IaC) using tools like ARM templates or Terraform. • Ensure security best practices are implemented across all Azure services using Azure Security Center and other tools. • Implement and manage containerized applications using Azure Kubernetes Service (AKS). • Stay abreast of the latest Azure services and technologies, ensuring our solutions leverage the latest capabilities.

• The API/Microservices/AWS Software Engineer designs and builds scalable, cloud-based microservices on AWS, using Java and modern DevOps practices. • You’ll partner with architects and teams to deliver reliable, high-performing APIs and services in a fast-paced, Agile environment. • Be involved in designing and building services in a continuous delivery model on a cloud platform. • Partner with leads and architects to help establish a technical vision and deliver innovative services which are consistent, maintainable, and highly scalable for various commerce experiences. • Work within microservices architecture, domain driven design, and RESTful APIs using Java. • Work in a distributed/cloud-based environment, including Amazon Web Services & Kubernetes with high transaction volumes. • Use data structures, algorithms, and architecture patterns. • Define solutions, provide estimates on effort and risk, and evaluate technical feasibility. • Use modern build strategies, continuous integration, unit testing, static analysis, and automated integration tests. • Practice full DevOps to ensure a culture of testing and releasing software on Amazon Web Services continuously using automation and monitoring. • Leverage NoSQL using Amazon Web Services to ensure data storage is designed for security, reliability, availability, maintainability, and performance. • Deliver software in a Scrum development process. • Perform technical code reviews and pair programming. • Partner with other teams to ensure the service ecosystem is loosely coupled and scalable.

Role Description Concentrix is seeking a highly experienced Cloud Solution Architect (CSA) for Azure Infrastructure. The CSA will act as a trusted technical advisor, helping customers accelerate their cloud transformation journeys by designing, deploying, and optimizing Microsoft Azure Infrastructure solutions, with a strong focus on: - Azure VMware Solution (AVS) - Infrastructure Modernization - Hybrid Cloud - Azure Migration initiatives The ideal candidate combines deep infrastructure expertise with strong customer-facing consulting skills and is capable of leading complex cloud transformation engagements from strategy through production adoption. This role aligns with Microsoft's Cloud & AI Infrastructure priorities and customer success mission. Key Responsibilities - Serve as the primary technical advisor for strategic Azure Infrastructure engagements. - Lead architecture discussions with customer stakeholders, IT leadership, and infrastructure teams. - Drive successful deployment, adoption, optimization, and operationalization of Azure solutions. - Deliver technical workshops, architecture reviews, migration assessments, and proactive services. - Guide customers through cloud transformation and modernization initiatives. Azure Infrastructure Architecture - Design enterprise-scale Azure landing zones aligned with Microsoft Cloud Adoption Framework (CAF). - Architect highly available, secure, and resilient Azure Infrastructure solutions. - Design networking architectures including: - Azure Virtual WAN - ExpressRoute - Hub-and-Spoke Networks - Azure Firewall - Private Endpoints - Hybrid Connectivity Azure VMware Solution (AVS) - Lead VMware-to-Azure migration strategies using Azure VMware Solution. - Design AVS environments including: - vSphere - NSX-T - HCX Migration Services - Hybrid Connectivity - Disaster Recovery Architectures - Support migration assessments, workload discovery, and migration planning. - Drive AVS modernization scenarios and guide customers toward Azure-native services where applicable. Hybrid Cloud & Modernization - Design and implement solutions leveraging: - Azure Arc - Hybrid Compute - Hybrid Identity - Hybrid Management - Enable customers to modernize legacy infrastructure while maintaining operational continuity. Qualifications - 10+ years of experience in Enterprise Infrastructure, Cloud Architecture. - Minimum 5 years of hands-on experience with Microsoft Azure. - Proven experience delivering large-scale cloud migration programs. - Demonstrated expertise in Azure VMware Solution and VMware ecosystem technologies. - Strong stakeholder management and executive communication skills. - Experience leading customer-facing technical discussions and workshops. - Ability to work independently across multiple enterprise engagements. - Fluency in English and Russian. Location RON Work-at-Home Time Type Full time

Role Description The AWS Cloud Security Architect will work as part of an agile development team to build and support the modernization of enterprise-class software applications. The successful candidate shall be capable of providing technical cloud security subject matter expertise to meet current and future security design and architecture requirements for IaaS, PaaS, and SaaS implementations. - Designing secure cloud architectures - Performing risk assessments using enterprise tools - Coordinating with ITSO and CISA to validate system security through independent evaluations - Creating essential security documentation, including System Security Plans, Business Continuity Analyses, and Disaster Recovery Plans - Delivering a quarterly Cloud Security Roadmap - Providing operational support to cover cloud firewalls, ACLs, SSL, API endpoints, authentication procedures, private image management, and secure network segmentation - Supporting incident response planning - Supporting automation for legacy systems - Ensuring proper documentation of cybersecurity control artifacts - Ensuring continuous monitoring and secure data handling - Engaging in proactive risk mitigation - Strengthening the security posture across production and non-production cloud environments within the CMSO ecosystem Qualifications - Technical Training, Certification(s) or Degree required; BA/BS strongly preferred - 4 years of general experience in information systems may be substituted in lieu of preferred degree - 8+ years of specialized experience required Requirements - Container Security — Expert Level: - Deep expertise in Amazon EKS security architecture: pod identity, multi-tier namespace isolation, and node group separation across security classification tiers - Expert Kubernetes RBAC design and auditing: least-privilege ClusterRoles, service account hardening - Strong expertise in Kubernetes NetworkPolicy - Expert Pod Security Admission controls: restricted/baseline profile enforcement, Gatekeeper policy-as-code - Full lifecycle container image security: ECR private registry, image tag immutability, Inspector Enhanced Scanning, cosign image signing, SBOM generation - Expert GitLab CI/CD pipeline security: OIDC-based AWS authentication, build node egress restriction, pipeline-integrated scanning (Wiz, Trivy, Checkov, TestifySec), and immutable artifact promotion - Experience implementing container performance monitoring using New Relic or equivalent (Prometheus, OpenTelemetry, Fluent Bit) - Demonstrated experience designing FedRAMP High multi-tier web applications on EKS with tiered security classification boundaries - Network Security - Expert Level: - Expert AWS VPC architecture: multi-tier subnet design, Transit Gateway, EKS hardening - Deep experience with security groups, Network ACLs, and AWS Network Firewall: domain allowlist policies, and build node egress controls - Expert VPC endpoint design: gateway and interface endpoints - Expert AWS WAF - Deep expertise in API Gateway security: designing private endpoints, JWT authorizers, resource policies, and mTLS - Experience implementing AWS Direct Connect and Site-to-Site VPN with BGP route security and hybrid connectivity hardening - Expert design of VPC Flow Log analysis pipelines using CloudWatch Logs Insights, Athena, and Splunk (SPL queries, correlation searches, network security dashboards) - Security Monitoring - Expert Level: - Expert design of CloudWatch multi-account architectures: cross-account observability, centralized log aggregation, composite alarms, and metric filter-based real-time detection - Experience integrating CloudTrail, GuardDuty, Security Hub, and Config across AWS Organizations with EventBridge-driven automated response - Expert Splunk integration: CloudTrail, GuardDuty, VPC Flow Logs, and EKS audit log ingestion with high-fidelity correlation searches - Vulnerability Management - Expert Level: - Expert design of multi-layer VM programs for containerized AWS workloads: Amazon Inspector (EC2, ECR Enhanced Scanning, Lambda, EKS workload association), pipeline-integrated image scanning, IaC scanning, and Kubernetes configuration assessment - Deep experience with pipeline-integrated scanning tools: Tools such as Trivy and Grype for CVE detection, Syft for SBOM generation (CycloneDX), kube-bench for CIS Kubernetes Benchmark assessment - Proficiency with AWS native VM tooling: Inspector, Security Hub finding aggregation, Systems Manager Patch Manager for EC2/EKS node OS patching, and Config conformance packs (NIST 800-53, FedRAMP High) for configuration vulnerability tracking - Experience with enterprise VM platforms in federal environments: commercial CNAPPs for agentless cloud-native assessment and attack path analysis - Expert runtime threat detection: GuardDuty EKS Runtime Monitoring, and correlation of runtime behavioral signals with static CVE findings for prioritized response - Ability to design and measure VM program effectiveness metrics: MTTD and MTTR per severity tier, detection coverage gap analysis via threat-to-detection mapping - ATO and Compliance: - Expert IAM least privilege: SCPs, permission boundaries, condition keys, and IAM Access Analyzer - Demonstrated FedRAMP High ATO leadership: SSP authoring, NIST 800-53 rev5 control implementation statements, POA&M management, 3PAO assessment support, and continuous monitoring program design Benefits - Comprehensive benefits and wellness packages - 401K with company match - Competitive pay and paid time off - Full flex work weeks where possible - Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave - GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12-month period for eligible employees - Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance