The posting
Client: US fintech (payments platform) · Location: remote, LATAM, US Eastern overlap · Level: senior / principal · Engagement: full-time contractor
You will own the AWS architecture of a regulated payments platform: multi-account structure, network, security baseline and cost.
What you will do
- Design and evolve the multi-account landing zone (Organizations, Control Tower, IAM Identity Center)
- Define reference architectures for services on EKS, Lambda, RDS/Aurora and MSK
- Lead multi-region resilience and disaster recovery design with tested RTO and RPO targets
- Set security standards: network segmentation, KMS key strategy, secrets management
- Run architecture reviews and Well-Architected assessments with engineering teams
- Drive FinOps: tagging, budgets, savings plans and right-sizing
What you bring
- 8+ years in infrastructure or cloud engineering, 4+ architecting on AWS
- Infrastructure as code at scale with Terraform or CDK
- Experience in PCI DSS or SOC 2 environments
- Deep networking knowledge (VPC, Transit Gateway, PrivateLink)
- Ability to write clear design documents and defend trade-offs in English
Nice to have
- AWS Solutions Architect Professional or Security Specialty
- Previous SRE or platform engineering role
- Experience with core banking or card-processing integrations



