Job Description

BTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world, helping them win now and anticipate tomorrow. BTVK Advisory, and its affiliated entities, have operations in North America, South America, Europe, Asia, and Australia. BTVK Advisory’s ultimate parent entity, Baker Tilly US, LLP, is an independent member of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.

To be added to all ET through Experienced requisitions Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.

Responsibilities:

• Own and enforce multi-account AWS Organization guardrails, ensuring robust security, compliance, and streamlined governance across all AWS accounts.
• Build, manage, and maintain Infrastructure as Code (IaC) using both CloudFormation and Terraform in a hybrid environment. This includes configuring and provisioning resources such as VPCs, ALB/NLB, WAF, EC2, ECS, EKS, Lambda, RDS, Redshift, S3, CloudFront, SES, Secrets Manager, and SSM.
• Operate and manage CI/CD pipelines using GitHub Actions and Azure DevOps. Responsibilities include environment promotion and automating Git merges post-release to ensure seamless deployment workflows.
• Provide incident response support, including managing SLOs/SLIs, creating and maintaining runbooks, troubleshooting issues, and conducting log reviews to ensure issues are quickly identified and resolved.

Qualifications:

• Bachelor’s degree required. AWS Solutions Architect – Professional or AWS DevOps Engineer – Professional certification is preferred.
• Minimum of 3 years of experience in DevOps engineering or a similar technical role.
• Proficient in AWS services such as EC2, VPC, ALB/NLB, WAF/Shield, CloudFront, Lambda, Step Functions, S3, RDS/Redshift, IAM, Organizations, and Control Tower.
• Strong experience in managing infrastructure using CloudFormation & Terraform (modules, workspaces). Knowledge of AWS CDK is a plus.
• Practical experience with CI/CD tools such as GitHub Actions and Azure DevOps. Familiarity with artifact and versioning strategies. Familiarity with SES domain management, SCIM/Okta for identity and access management, and WordPress hosting strategies, including server optimization and deployment in cloud environments.
• Expertise in Linux system hardening, AMI baking (using Packer), and performing OS upgrades and patching. Solid understanding of VPC design, security groups, WAF, Route 53, TLS, rate limiting, geo-allow listing, and other network security configurations.
• Experience in managing AWS financials, including savings plans/RI modeling, CUR, cost metrics, tagging strategies, and anomaly detection.
• Proficient in using CloudWatch, telemetry, setting up alarms, logs, and tracing for monitoring and observability. Strong scripting skills in Bash and Python to automate processes and manage infrastructure efficiently.