AWS Cloud Administrator

Key Responsibilities

• Manage and monitor an AWS GovCloud environment (us-gov-west-1) hosting Amazon Connect, Bedrock, Lambda, Lex, Kinesis, S3, CloudWatch, QuickSight, and Contact Lens
• Administer IAM roles, policies, and permission boundaries following least-privilege principles for all team members and service accounts across Dev, Test, UAT, and Production environments
• Maintain ≥99.9% uptime SLA for AI services and ≥99.5% for production environments
• Manage environment provisioning and configuration across the four-tier environment structure (Development, Test, UAT, Production), ensuring parity and change isolation
• Coordinate scheduled maintenance windows and deployment activities with the CAB process via ServiceNow, ensuring zero-downtime deployments where possible
• Implement and maintain CloudTrail logging, VPC Flow Logs, and CloudWatch Logs for all AI services; format and forward logs to the SIEM for security monitoring
• Support the Security Engineer with FedRAMP High compliance activities: continuous monitoring, POA&M tracking, security control evidence collection, and audit artifact preparation
• Manage S3 bucket policies, encryption configurations (SSE-S3, SSE-KMS), and lifecycle rules for call recordings, transcripts, and AI inference logs
• Monitor AWS service quotas and request increases as call volumes scale; track Bedrock inference consumption, Lambda concurrency, and Kinesis shard utilization
• Configure and maintain AWS backup strategies for critical data stores (DynamoDB, S3) with documented recovery procedures
• Respond to operational incidents per the incident management framework; perform root cause analysis and implement preventive measures
• Support 24x7x365 monitoring and on-call rotation for production environment availability
• Maintain operational runbooks and standard operating procedures for common administrative tasks, incident response, and disaster recovery

Requirements

• 3+ years of experience administering AWS environments in production, including IAM, VPC, CloudWatch, CloudTrail, S3, Lambda, and KMS
• Experience operating within AWS GovCloud or equivalent FedRAMP-authorized cloud environments
• Strong understanding of IAM policy design, service control policies, permission boundaries, and cross-account access patterns
• Proficiency with CloudWatch monitoring, alarms, dashboards, and log management (CloudWatch Logs, Log Insights)
• Experience with infrastructure-as-code (CloudFormation, CDK, or Terraform) for environment provisioning and change management
• Familiarity with NIST 800-53 security controls, FedRAMP continuous monitoring requirements, and DFARS 252.204-7012
• Understanding of encryption at rest (KMS, SSE) and in transit (TLS 1.2/1.3) implementation in AWS
• Experience with incident management processes and on-call rotations in production environments
• Knowledge of serverless architecture administration (Lambda, API Gateway, Kinesis, S3 event triggers)
• Strong documentation skills for runbooks, SOPs, and compliance evidence
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent experience)
• AWS certifications: SysOps Administrator, Solutions Architect, or Security Specialty
• Experience with Amazon Connect administration and Contact Lens configuration
• Prior work in IL4/IL5 or DoD environments with STIG compliance requirements
• Familiarity with ServiceNow for change management and incident tracking
• Experience with Azure GCC High environments and Azure-to-AWS interoperability
• Knowledge of HIPAA technical safeguards and healthcare data handling requirements
• Experience with AWS Organizations, Control Tower, or multi-account governance

Qualifications

None specified.

Skills

None specified.

Benefits

None specified.

Pay

None specified.

Schedule

24x7x365 on-call rotation.

Note: rockITdata is an equal opportunity employer and does not require any monetary transactions before employment. For more information, visit our careers page at www.rockitdata.com/careers.