Infrastructure ArchitectIntelliTrans, (ITL), a subsidiary of Roper Technologies, Inc. is seeking an Infrastructure Architect to join our team, hybrid in Atlanta, GA.Location: Atlanta, GA (Hybrid) Reports To: Chief ArchitectJob SummaryThe Infrastructure Architect will lead the strategic design and implementation of enterprise-grade cloud infrastructure solutions on AWS. This senior role architects scalable, secure, and highly available infrastructure supporting multi-tenant SaaS applications, comprehensive monitoring systems, and mission-critical operations.
The position requires deep AWS expertise, multi-tenant architecture proficiency, and ability to integrate AWS Marketplace and third-party solutions while delivering robust, cost-effective infrastructure at scale.Essential Duties and ResponsibilitiesEssential Duties and Responsibilities include the following. Other duties may be assigned.Define infrastructure architecture strategy and roadmap aligned with business objectivesDesign scalable, secure AWS infrastructure following Well-Architected Framework and SaaS Lens principlesArchitect multi-tenant SaaS infrastructure with tenant isolation, resource segregation, and automated provisioningDevelop production-grade Infrastructure as Code using Terraform, AWS CDK, and CloudFormationCreate reusable, modular infrastructure components and tenant-aware templatesDesign CI/CD pipelines using GitLab CI/CD for infrastructure deployment with automated testing and security scanningImplement deployment strategies (blue-green, canary, rolling) for infrastructure and containerized workloads (ECS/EKS)Design enterprise monitoring and observability using Nagios, CloudWatch, Prometheus, and GrafanaEstablish tenant-aware monitoring with APM, distributed tracing (X-Ray), log aggregation, and intelligent alertingArchitect solutions leveraging AWS Marketplace products for monitoring, security, and infrastructure managementEstablish secure integration patterns with third-party SaaS platforms (OAuth, SAML, API gateways)Design tenant isolation strategies across compute, storage, network, and database layersImplement metering, usage tracking, and cost allocation systems for multi-tenant environmentsEstablish tenant tiering (free/standard/premium) with resource quotas, SLAs, and performance isolationEstablish infrastructure standards, governance frameworks, and policy-as-code (Config, SCPs, OPA)Design disaster recovery, backup strategies, and business continuity proceduresDesign multi-account strategies using AWS Organizations, Control Tower, and Landing ZoneLead technical architecture reviews and recommend optimal AWS infrastructure solutionsMentor engineering teams on AWS best practices, infrastructure patterns, and DevOps practicesLead incident response, post-mortems, and continuous improvement initiativesDocument architectural decisions, infrastructure designs, and operational proceduresWork effectively across global teams and different time zonesQualifications and BackgroundEducationRequired: Bachelor's degree in Computer Science or Information SystemsPreferred: Master's degree in Computer Science or Information SystemsCertifications Required: AWS Certified DevOps Engineer – ProfessionalExperience10+ years in infrastructure architecture and cloud engineeringExtensive hands-on AWS infrastructure expertise across core servicesDeep expertise with Terraform, AWS CDK, and CloudFormation Templates (CFT)Proven track record architecting production-grade AWS infrastructure for enterprise environmentsExpert-level infrastructure CI/CD pipeline design using GitLab CI/CDStrong proficiency in SaaS infrastructure and multi-tenant design principlesExperience architecting large-scale infrastructure for multi-tenant SaaS platformsProven success integrating AWS Marketplace products and third-party SaaS platformsExperience with enterprise monitoring and observability platforms including NagiosSkillsAWS Cloud Infrastructure (Expert Level):Compute: EC2, ECS/Fargate, EKS, Lambda, Auto Scaling, BatchStorage: S3, EBS, EFS, FSx, Storage Gateway, BackupDatabase: RDS, Aurora, DynamoDB, Redshift, ElastiCache, DocumentDBNetworking: VPC, Route 53, CloudFront, API Gateway, Direct Connect, Transit Gateway, PrivateLink, VPNSecurity: IAM, KMS, Secrets Manager, Cognito, GuardDuty, Security Hub, WAF, Shield, MacieManagement: CloudWatch, CloudTrail, Systems Manager, Config, Control Tower, Organizations, Service CatalogInfrastructure as Code (Advanced):Terraform (advanced modules, state management, workspaces, complex architectures)AWS CDK (TypeScript/Python with constructs, patterns, custom resources)CloudFormation (nested stacks, StackSets, custom resources, drift detection)Policy-as-code (AWS Config Rules, Service Control Policies, OPA)Git version control with GitFlow and trunk-based developmentSaaS & Multi-Tenant Infrastructure:Tenant isolation patterns (VPC isolation, account-level, database-level, row-level security)Identity & access management (Cognito, tenant-aware IAM, RBAC)API Gateway (usage plans, tenant routing, rate limiting, throttling)Metering, billing, usage tracking, cost allocation tagsResource pooling, capacity planning, workload managementWell-Architected SaaS Lens implementationCI/CD & Infrastructure Automation:GitLab CI/CD (advanced pipelines, runners, security scanning, artifact management)AWS Developer Tools (CodePipeline, CodeBuild, CodeDeploy, CodeArtifact)Containers (Docker, ECS/Fargate, EKS, ECR, Helm charts, Kubernetes operators)Deployment strategies (blue-green, canary, rolling updates, feature flags)GitOps practices and infrastructure drift detectionInfrastructure testing frameworksMonitoring & Observability:Nagios (Core/XI, NRPE, NCPA, custom plugin development)CloudWatch (Metrics, Logs, Alarms, Dashboards, Synthetics, Insights), X-RayPrometheus, Grafana, Managed Prometheus, Managed GrafanaLog management (CloudWatch Logs Insights, OpenSearch Service)Distributed tracing (X-Ray, OpenTelemetry)Alerting (SNS, EventBridge, PagerDuty, Opsgenie)APM tools integration (Datadog, New Relic, Dynatrace)Tenant-aware monitoring with isolated metrics and dashboardsSecurity & Compliance:IAM policies, roles, SCPs, permission boundariesEncryption (KMS, at-rest, in-transit), secrets management, data maskingZero-trust architectures and least privilege principlesCompliance frameworks (HIPAA, PCI-DSS, SOC 2, GDPR, ISO 27001)Security scanning, vulnerability management, AWS Security HubNetwork security (security groups, NACLs, WAF, Shield)Infrastructure Optimization:Cost optimization (Cost Explorer, Trusted Advisor, Compute Optimizer, Savings Plans, RI, Spot)Performance tuning and capacity planningHigh availability and fault tolerance designDisaster recovery and backup strategies (AWS Backup, cross-region replication)Multi-region and multi-account architecturesDevelopment & Automation: