Logo for Full Scale

AWS Cloud Architect (ETL & Terraform)

Full Scale

Role overview

Qualifications

  • 5+ years in cloud engineering with at least 4 years focused on AWS architecture
  • Expert-level Terraform or OpenTofu (module authorship, state strategy, and multi-account patterns)
  • Strong hands-on ETL/data engineering background using AWS Glue, Spark, Step Functions, and Python
  • Strong security architecture knowledge, including IAM, KMS, network segmentation, and AWS security services

Responsibilities

  • Own the multi-account AWS Organization design
  • Design the security architecture and keep it coherent as services multiply
  • Lead the EKS adoption path
  • Build the data lineage and cataloging practice

About the company

Full Scale logo

Full Scale

Software Development

Full Scale is a tech services company that helps businesses build teams of software engineers. Our goal is to make finding and retaining highly experienced software engineers fast, easy and affordable. As lifelong entrepreneurs and software startup founders, we tore pages out of our own playbooks in order to create a service offering that is for Founders, by Founders! Matt DeCoursey is a Kansas City-based entrepreneur, co-founder, and CEO of Full Scale, co-host of the Startup Hustle podcast; as well as the founder of Gigabook. He is the top-selling author of Million Dollar Bedroom and Balance Me as well as the co-author of The Realist’s Guide to a Successful Music Career. Matt Watson is a Kansas City-based entrepreneur, co-founder of Full Scale, co-host of the Startup Hustle podcast; as well as the founder of Stackify. After a 150-million-dollar exit from VIN Solutions Matt founded Stackify, to help developers improve application performance so they can focus on building better apps. In 2021, Stackify was acquired by Netreo, earning Matt Watson a two-time exit Founder. Hosting the Startup Hustle podcast, we spend 5 days a week talking to entrepreneurs, influencers, investors and thought leaders shaping the local Startup ecosystem whom all say they have the same problem when it comes to finding the tech talent to help grow their business. It didn’t take long to realize something had to change. With that, we created Full Scale. We take a consultative approach with clients so that you can feel confident you are choosing the right team member for your project. To learn more about what we do: fullscale.io To learn more about who we are: https://linktr.ee/startuphustle

Company details

IndustrySoftware Development
Company size201 - 500

Links

LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

This is a remote position.
Join one of the Philippines' fastest-growing tech companies! Open to Philippine-based candidates only.

Company Overview
Full Scale is a tech services company that helps businesses build dedicated teams of skilled software engineers. We make finding and retaining experienced software talent easy and affordable.

Position Summary
We are looking for an AWS Cloud Architect to join our growing team and serve as the technical authority on a multi-account AWS platform built for scale. You will own the cloud architecture, the Terraform/OpenTofu module ecosystem, and the ETL and data pipeline layer that feeds a lakehouse and ML services for a US-based client in the automotive retail space. This is a hands-on architecture role — not a slide-deck role. You will write Terraform, build Glue jobs, debug VPC route tables, and own the standards that make the platform scale across multiple business units. You will
partner with a DevOps Engineer (who operates what you design) and a Data Scientist (whose models depend on the data you make available and trustworthy).

Key Responsibilities
  • Own the multi-account AWS Organization design: OU structure, account vending, Service Control Policies, Control Tower guardrails, and IAM Identity Center for SSO.
  • Own network architecture — Transit Gateway hub-and-spoke, VPC design and segmentation, PrivateLink, DNS, and cross-account connectivity — designed for multi-region and multi-tenant growth.
  • Design the security architecture and keep it coherent as services multiply: IAM boundaries and least privilege, KMS key strategy, org-wide CloudTrail, GuardDuty/Security Hub/Inspector/Macie, and WAF/Shield at the edge.
  • Define reference architectures and standards for new services so the tenth service built looks like the first. Author and maintain architecture documentation.
  • Lead the EKS adoption path: Fargate vs. managed node groups, IRSA, cluster networking, and which workloads belong in containers vs. staying serverless.
  • Own AWS Well-Architected reviews and drive remediation. Own cloud cost architecture — tagging strategy, chargeback by workload, and commitment planning.
  • Own the Terraform/OpenTofu codebase end to end: module design, versioning, registry strategy, state management, and Terragrunt configuration across environments and accounts.
  • Enforce IaC quality through policy-as-code (OPA/Sentinel or equivalent), automated plan review, drift detection, and remediation.
  • Eliminate console-created resources — everything that exists should exist in code.
  • Mentor engineers on IaC patterns and review infrastructure changes.
  • Own the lakehouse architecture: S3 Bronze/Silver/Gold zones, partitioning and file-format strategy, Glue Data Catalog, Lake Formation governance, and Databricks integration.
  • Design, build, and maintain ETL and ELT pipelines ingesting from CRM/DMS systems, call data, payment systems, inventory feeds, and OEM sources — using AWS Glue, Lambda, Step Functions, EventBridge, and Databricks as appropriate.
  • Own data quality: validation at ingestion, schema evolution, reconciliation, late and duplicate record handling, and alerting when a feed goes quiet or goes wrong.
  • Design change-data-capture and incremental-load patterns; move off full reloads where they still exist.
  • Own the Aurora footprint (MySQL and PostgreSQL/pgvector), including schema design, performance tuning, and serverless scaling configuration.
  • Build the data lineage and cataloging practice so analysts and scientists can answer "where did this number come from" without asking a person.
  • Design pipelines with downstream ML consumption in mind — reproducible features, stable definitions, and backfill capability.
  • Define and enforce data retention, PII classification, and access control policy across the lake, with particular care around call recordings, payment data, and customer records.
  • Support PCI-relevant scoping and segmentation decisions on the payment path.


Requirements

  • 5+ years in cloud engineering with at least 4 years focused on AWS architecture.
  • Expert-level Terraform or OpenTofu (module authorship, state strategy, and multi-account patterns).
  • Demonstrated multi-account AWS design experience (Organizations, Control Tower, SCPs, Transit Gateway, IAM Identity Center).
  • Strong hands-on ETL/data engineering background using AWS Glue, Spark, Step Functions, and Python.
  • Experience designing data lakes or lakehouses, including Bronze/Silver/Gold architecture and governance using Lake Formation or similar.
  • Deep serverless experience with Lambda, API Gateway, EventBridge, SQS/SNS, and Aurora Serverless.
  • Strong SQL and relational data modeling skills, including performance tuning on Aurora or similar managed databases.
  • Strong security architecture knowledge, including IAM, KMS, network segmentation, and AWS security services.
  • Ability to write clear technical design documents that engineers can implement without additional clarification.
Nice-to-Have / Plus Qualifications
  • Terragrunt experience (strongly preferred).
  • Databricks and Delta Lake production experience.
  • EKS design and migration experience, including EC2-to-container migration with minimal downtime.
  • Experience with streaming and CDC tools such as Kinesis, MSK, DMS, or Debezium.
  • Automotive retail data integration experience (Tekion, CDK, Reynolds, Dealertrack, VinSolutions, or similar DMS/CRM platforms).
  • PCI DSS scoping and compliance architecture experience.
  • AWS certifications (Solutions Architect – Professional, Data Engineer, or Security Specialty).
  • Experience supporting ML and RAG workloads, including vector store design

Benefits

  • Fully remote – work from anywhere in the Philippines.
  • Senior architecture role with genuine decision-making authority over a production AWS platform.
  • Hands-on work with a mature, over-built cloud foundation — not a "build it from scratch" greenfield engagement.
  • Opportunity to shape data platform standards that will scale across multiple business units.
  • Small, senior, high-autonomy team with a documentation-first culture.
  • Collaborative engineering environment with strong Full Scale account support.
  • A team environment that values ownership, technical depth, and follow-through.

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Cloud Architect Related jobs

PhilippinesCloud Architect

Other jobs at Full Scale

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.