AWS Technical Consultant

MTX is seeking a highly skilled and client-focused Technical Consultant with proven expertise in Amazon Web Services (AWS) to join our dynamic team. The ideal candidate will be responsible for architecting, implementing, optimising and supporting highly available AWS cloud-based infrastructures, while also enabling performance monitoring and observability using Dynatrace. This role is key in driving the strategic direction, delivery, and success of Salesforce projects, ensuring they align with both client expectations and business objectives.

Key Responsibilities:

• Design, implement, and manage scalable, secure, and highly available solutions on AWS.
• Design and implement AWS network architectures, including VPCs, subnets, route tables, NAT gateways, and Transit Gateways.
• Build and manage AWS Landing Zones using AWS Control Tower, AWS Organizations, and custom automation.
• Configure and manage hybrid network connectivity such as AWS Direct Connect, VPN, and SD-WAN integrations.
• Develop and enforce network security policies (NACLs, Security Groups, Firewall Manager, etc.) aligned with best practices.
• Design and implement secure file transfer solutions using AWS Transfer Family (SFTP/FTPS/FTP)
• Automate file handling workflows, including validation, transformation, and downstream integration with other AWS services.
• Collaborate with security and compliance teams to ensure cloud environments meet governance and regulatory requirements.
• Automate infrastructure provisioning using Infrastructure as Code (IaC) tools such as Terraform, AWS CloudFormation, or CDK.
• Design and manage IAM roles, policies, groups, and federated access using AWS SSO or third-party identity providers.
• Implement least-privilege access, identity governance, and access reviews across accounts and environments.
• Monitor and troubleshoot network issues using AWS tools (CloudWatch, VPC Flow Logs, CloudTrail) and third-party solutions.
• Assist with account structure and guardrails using SCPs, IAM, and AWS Service Catalog.
• Stay updated on AWS service changes and emerging best practices in cloud network and landing zone management.

What you will bring:

• 4+ years of hands-on experience with AWS cloud networking and infrastructure
• Deep understanding of AWS services: VPC, Direct Connect, Transit Gateway, Route 53, IAM, Control Tower, Organizations.
• Hands-on experience with Landing Zone deployments and multi-account strategies.
• Proficiency in scripting and automation (e.g., Python, Shell, Terraform).
• Strong grasp of cloud security principles and best practices.
• 3+ years of experience in cloud-based file transfer solutions, including AWS Transfer Family.
• Experience with SFTP/FTPS/FTP protocols, public key authentication, and identity federation.
• Familiarity with Amazon S3, IAM, Lambda, and event-driven architecture.
• Understanding of encryption standards, logging, auditing, and secure file access controls.
• Experience integrating AWS environments with SSO solutions (Okta, Azure AD).
• Experience with CI/CD pipelines, Git, and Azure DevOps tools.
• Experience implementing and managing Dynatrace in enterprise environments is a bonus
• Excellent communication and client facing skills.
• AWS Certifications (e.g., AWS Certified Advanced Networking, Solutions Architect – Professional) preferred