Infrastructure Architect - AWS

We are looking for a Principal Infrastructure who can command, design, and operate a globally distributed production environment across the US, UK, and AU regions. This role is for an architect-level engineer who still loves to get their hands dirty — the kind of person who can both lead a SRE / DevOps team and SSH into a production node to trace issues.

About the Role

This role involves end-to-end control of our multi-region infrastructure (AWS + on-prem hybrid) spanning compute, VoIP, databases, monitoring, and automation.

Responsibilities

Reliability and uptime for mission-critical communication systems handling millions of SIP sessions and HTTP requests daily.

Management and mentorship of DevOps / SRE and Support Engineers, ensuring process maturity and on-call readiness.

Responsibility for performance, scalability, and security across all environments.

Decision authority on infrastructure architecture, cost optimization, and modernization initiatives.

Qualifications

10+ years in Infrastructure / DevOps / SRE roles

Proven expertise running production-grade, multi-region environments in AWS.

Deep understanding of networking, SIP signaling, NAT traversal, RTP, and media relay.

Proficiency in Debian / Linux internals, kernel tuning, and packet tracing.

Hands-on experience with WAF, ModSecurity, fail2ban, iptables, and system hardening.

Solid background in Ansible, AWX, Python (2.7 / 3.x), and Bash scripting.

Experience managing Grafana Loki, Prometheus, and alerting frameworks.

Familiarity with Docker / Docker Compose / Terraform for repeatable infra.

Prior leadership experience — leading cross-functional infrastructure teams in 24x7 environments.

Required Skills

Architect, operate, and continuously improve AWS environments (EC2, EKS, RDS, Route 53, VPCs, IAM, S3, LAMDA, Cloudfront).

Maintain multi-layer high-availability VoIP servers.

Design and enforce multi-region DR and failover policies with automated recovery.

Manage clusters for MariaDB, MongoDB, Redis, and RabbitMQ.

Own and optimize Kamailio, Asterisk, RTPProxy, and RTPEngine stacks — ensuring consistent SIP routing, NAT traversal, and call resilience across regions.

Build SIP-level observability : tracing dialogs, RTP flows, and registrations through Grafana, Loki, and sngrep pipelines.

Lead continuous performance and load testing with SIPp and Playwright-based automation frameworks.

Enforce multi-layer security using ModSecurity, fail2ban, IPTables, and real-time log-based intrusion prevention.

Build proactive defenses against SIP scanning, brute-force attacks, and zero-day threats.

Maintain end-to-end TLS, cert rotation, and infrastructure audit trails.

Drive compliance with regional (US / UK / AU) data protection requirements.

Manage a large-scale Grafana + Loki + Prometheus monitoring.

Correlate VoIP, network, and application metrics for unified visibility.

Build actionable alerts and dashboards for call traffic, system health, and anomaly detection.

Implement distributed tracing and incident replay for debugging call failures.

Maintain full configuration automation via Ansible + AWX with disaster recovery playbooks.

Build self-healing routines for proxy or service recovery via scripts and cron jobs.

Design CI / CD pipelines for infrastructure code, ensuring rapid, controlled deployments.

Implement chaos testing and resilience benchmarking to proactively harden infrastructure.

Lead a DevOps and Support Engineering team, setting standards for incident response, documentation, and reliability.

Conduct performance reviews and mentor team members on debugging, SIP analysis, and cloud automation.

Establish a culture of observability and ownership — no “restart and pray” mentality.

Work directly with development teams (Laravel, Node.js, React) to ensure application-level readiness for scale.

Preferred Skills

Experience with cloud-native technologies and microservices architecture.

Familiarity with Agile methodologies and DevOps practices.