3+ years in infrastructure design and delivery in AWS environments
Hands-on experience with enterprise cloud networking (VPN, AWS Direct Connect, load balancing)
Ability to diagnose network and infrastructure faults independently
Deep AWS expertise in networking, IAM, and DNS across multi-account environments
Fluency in Terraform and Terragrunt within a GitOps workflow
Working knowledge of Kubernetes (Amazon EKS) and GitOps tooling
Strong technical writing skills for actionable documentation
Proven ability to translate designs into executable tasks for engineering teams
Responsibilities
Own technical relationships with customer architecture, network, and security teams
Research and design infrastructure solutions tailored to customer needs
Design network topology and connectivity for AWS environments
Diagnose complex network issues and provide clear documentation for resolution
Manage AWS IAM and DNS design across deployments
Ensure platform services are cost-effective and appropriately sized
Translate designs into Jira tasks and track progress to completion
Benefits
Competitive salary package
Paid lunch in the office
Private healthcare
Yearly bonus
Training and workshops
Opportunity to work with top-tier engineers
Full Job Description
We're seeking an experienced Infrastructure Solution Architect to design and optimize the infrastructure systems that support our critical services used by millions. In this role, you'll collaborate with stakeholders to gather requirements, create detailed infrastructure designs, and work closely with engineers to ensure seamless implementation. The ideal candidate possesses a strong technical foundation, proven project management abilities, expertise in network design, and a commitment to achieving top-tier performance and cost-efficiency.
Responsibilities:
Customer Engagement
Own the ongoing technical relationship with customer architecture, network, and security teams: requirements gathering, design walkthroughs, change discussions, and security reviews.
Research and design infrastructure solutions for customer requirements, and present them to customer stakeholders.
Focus on the infrastructure scope; application-layer design is owned by other teams.
Network Design & Troubleshooting
Design network topology, connectivity, and IP address plans for multi-account AWS environments and customer interconnects: AWS Direct Connect, site-to-site VPNs, routing policies, firewalls including Layer 7 application firewalls, and the public edge built on Application Load Balancer, AWS Web Application Firewall, and AWS Certificate Manager.
Plan and manage IP address allocation across environments and customer interconnects.
Diagnose complex network issues hands-on - including faults within customer-managed networks - and produce clear, evidence-based write-ups for the engineers implementing the fix, typically the customer's own network team.
Work with our delivery team to drive issue resolution with the customer.
Infrastructure Design & Optimization
Own AWS Identity and Access Management (IAM) and DNS design across deployments: access boundaries, trust relationships, and DNS structure for multi-account environments.
Keep platform services - Amazon Elastic Kubernetes Service (EKS), Amazon Relational Database Service (RDS), Amazon ElastiCache, Amazon Managed Streaming for Apache Kafka (MSK), and Amazon OpenSearch Service - correctly sized and cost-effective on our standard architecture as each deployment grows.
Define the technical scope of upgrades, migrations, and environment decommissioning.
Plan and run periodic high-availability and disaster-recovery exercises and cost optimization reviews.
Delivery & Documentation
Translate designs into Jira epics and child tickets, assign them to the infrastructure engineering team, and track progress to completion.
Surface risks and slippage early, and report status accurately.
3+ years owning infrastructure design and delivery in an architect or technical-lead capacity, in production AWS environments.
Strong hands-on experience with enterprise cloud networking, including several of the following: site-to-site VPN, AWS Direct Connect, load balancing, routing design, firewall and Layer 7 application firewall configuration, and IP address planning.
Proven ability to independently diagnose network and infrastructure faults and describe them clearly enough for another team to implement the fix.
Deep AWS experience in networking, IAM, and DNS across multi-account production environments; Azure or GCP experience is welcome but is not a substitute for AWS depth.
Fluency reading Terraform and Terragrunt within a GitOps delivery workflow, backed by prior hands-on infrastructure-as-code experience.
Working knowledge of Kubernetes (Amazon EKS), Helm, and GitOps tooling such as Argo CD.
Experience running technical discussions with external customers and owning the resulting design decisions.
Strong technical writing skills: design documents, architecture decision records, and root-cause analyses that others can act on.
Proven ability to break designs into executable tickets and drive them across an engineering team.
Excellent communication and interpersonal skills.
Nice to have
Telecom / BSS / OSS / MVNE or MVNO background
Kafka, Cassandra, PostgreSQL, or OpenSearch operations
Experience with enterprise security reviews or audits
Benefits:
Competitive salary package.
Paid lunch (In the office)
Private healthcare
Yearly bonus
Training and workshops
Top-of-the-class engineers to learn from and work with
About LotusFlare
LotusFlare is a California-based company that provides a platform for mobile network operators to manage their digital services. The platform offers a range of services, including customer engagement, billing, and analytics tools. LotusFlare's mission is to help mobile network operators improve their customer experience and increase revenue through the use of technology. The company was founded in 2014 by Michael Shang and Sachin Deshpande.
