What are the responsibilities and job description for the IT Systems Engineer - Cloud Architecture & Security position at Envera Systems?
About The Organization
Envera Systems operates on a cloud-first, security-driven architecture with AWS at its core. We protect mission-critical systems for communities and customers across Florida and beyond.
Description
The IT Systems Engineer - Cloud Architecture & Security will design and optimize the company cloud infrastructures with a focus on identity management, networking, and security compliance. This role is ideal for engineers with strong cloud security knowledge who can design for defense in depth, monitoring, and automation.
Responsibilities & Expectations
- Design secure, multi-account AWS organizations using AWS Organizations, Control Tower, and best practices in landing zone architecture. Experience with Azure and GCP a plus.
- Deploy and manage network security controls: Transit Gateway, VPC peering, WAF, Shield Advanced.
- Configure IAM federated identities, enforce least privilege, and manage service role boundaries.
- Implement comprehensive monitoring and logging using a multitude of tools, and SIEM integrations.
- Automate infrastructure builds using Terraform/CloudFormation with compliance tagging.
- Regularly run compliance scans, penetration testing, and vulnerability remediation.
- Support incident response initiatives by collecting/maintaining audit logs and root-cause evidence.
- Collaborate on company-wide Zero Trust, MFA enforcement, and endpoint hardening standards.
- Experience with implementing, monitoring and managing IoT device infrastructures is a strong plus.
Required Skills & Certifications
- Strong knowledge of AWS network and security services: IAM, VPC, WAF, GuardDuty, Security Hub, Macie, KMS.
- Proficiency in IaC for secure deployments (Terraform, CDK, CloudFormation).
- Familiarity with SOC 2, PCI-DSS, NIST CSF, and cloud compliance best practices.
- Skills in secrets management.
- Understanding of SSO federation and identity providers (Okta, Auth0).
- Certifications strongly preferred: AWS Certified Security - Specialty, AWS Solutions Architect Associate/Professional, CompTIA Security .
Education/Experience
- Bachelor's degree in Cybersecurity, Information Technology or equivalent work experience.
- 3-5 years of infrastructure security/architecture experience in cloud-native environments.
- Understanding of NIST standards for Information Security strongly desired