• AI-Informed Cloud Architecture Design: Define and maintain the enterprise cloud architecture strategy. • Develop and maintain cloud architecture standards, reference architectures, and design patterns. • Evaluate and adopt emerging cloud services and AI-native AWS capabilities. • Design and oversee CI/CD pipeline architecture for cloud infrastructure delivery. • Design cloud architectures for high availability, fault tolerance, and disaster recovery. • Mentor CloudOps Engineers and developers in cloud architecture best practices.

• Design, build, and maintain scalable, secure, and highly available cloud platform infrastructure. • Develop Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or Ansible. • Manage and optimize AWS, Azure, or Google Cloud environments for performance, reliability, scalability, and cost efficiency. • Build and enhance CI/CD pipelines that automate software delivery and infrastructure deployment. • Partner with software engineering teams to improve platform capabilities and developer experience. • Monitor platform health, troubleshoot production issues, and drive continuous operational improvements. • Implement security best practices across infrastructure, pipelines, and cloud environments. • Use AI-assisted development tools such as GitHub Copilot, Claude Code, or similar technologies to accelerate infrastructure development while validating quality, security, and maintainability. • Build and support the platform capabilities that enable engineering teams to safely adopt AI agents, including model access, MCP servers and gateways, tool integrations, identity management, and governance controls. • Extend observability and auditing capabilities to AI-driven workflows, ensuring agent actions are secure, traceable, and compliant. • Research emerging cloud, platform engineering, and AI technologies to continuously improve engineering practices. • Mentor engineers through technical guidance, code reviews, and knowledge sharing. • Support onboarding and development of new team members. • Participate in technical interviews and contribute to hiring decisions. • Collaborate with architecture teams to recommend platform improvements and long-term technical direction. • Champion responsible AI adoption by establishing best practices, evaluating emerging tools, and helping engineering teams effectively integrate AI into their daily workflows.

• Designs, implements, and continuously improves AWS security architecture. • Partners with cloud engineering, platform engineering, DevOps, Risk & Compliance, and product teams to build secure-by-default patterns, guardrails, and automation that enable delivery velocity without compromising security. • Influences cloud security strategy while providing hands-on architectural and engineering support. • Designs secure reference architectures and reusable security patterns for AWS workloads, including identity, networking, encryption, logging, monitoring, and secrets management. • Implements and operates enterprise AWS guardrails using Organizations, Control Tower, SCPs, AWS Config (managed and custom rules), Security Hub, GuardDuty, Detective, Macie, WAF/Shield, and AWS Network Firewall. • Applies least-privilege IAM using roles, permission boundaries, session policies, IAM Identity Center, SAML/OIDC federation, and ABAC/RBAC where appropriate. • Uses IAM Access Analyzer and automated validation to identify and reduce risk. • Designs secure VPC architectures, including subnet strategy, private endpoints, NAT and egress controls, Transit Gateway, Route 53, DNS Firewall, centralized ingress/egress, and service-to-service authentication. • Establishes detection-as-code and telemetry standards using CloudTrail, VPC Flow Logs, Route 53, RDS, ALB/NLB, and S3 access logs; integrates detections with SIEM/SOAR platforms. • Supports incident response through detections, playbooks, and tabletop exercises. • Embeds security into CI/CD pipelines using policy-as-code, Terraform checks, container and image scanning, SBOMs, and pre-commit hooks. • Automates remediation and drift detection using Lambda, Step Functions, and Terraform. • Maps technical controls to security frameworks including CIS AWS Foundations, NIST, ISO 27001, SOC 2, PCI DSS, and HIPAA (as applicable). • Conducts threat modeling (e.g., STRIDE) and risk assessments and drives remediation to closure. • Reviews designs, provides architectural guidance, and produces clear documentation and runbooks.

• Build and maintain services that interact with server BMCs over IPMI and Redfish across a heterogeneous hardware fleet (Dell, Supermicro, HPE, AMD, NVIDIA platforms) • Develop control-plane tooling for DPU provisioning and lifecycle management (NVIDIA BlueField, AMD Pensando) • Implement and harden serial-over-LAN, virtual media, and remote console workflows • Write Rust services (and Go/PHP where appropriate) that are observable, well-tested, and safe to run unattended at fleet scale • Contribute to internal SDKs and shared libraries used by other infrastructure teams • Partner with datacenter operations and hardware vendors to debug firmware, BMC, and DPU behavior in production • Participate in design reviews, code reviews, and on-call rotations for the OOB control plane • Improve test coverage, CI/CD pipelines, and tooling that lets us ship hardware automation safely • Document interfaces, runbooks, and failure modes so the system stays operable as it grows