Key Responsibilities

Set up and manage AWS VPC with private subnets only (no IGW / NAT).

Configure VPC Endpoints (S3, ECR, CloudWatch, KMS, STS, Secrets Manager, ECS).

Provision and harden EC2 GPU instances for inference workloads.

Deploy internal load balancers (NLB / ALB) for private service access.

Configure IAM roles and policies using least-privilege principles.

Deploy ECS Fargate services for internal API/gateway components.

Enable CloudWatch Logs, metrics, and basic alarms.

Assist with Terraform-based infrastructure deployment and validation.

Ensure the system meets the requirement that no data or tokens leave the VPC.

Required Skills

Strong hands-on experience with AWS core services:

EC2 (including GPU instances)

VPC, Subnets, Route Tables, Security Groups

IAM

S3 (private buckets, encryption)

ECR

ECS / Fargate

ALB / NLB

Experience working with Terraform (modules, variables, state).

Good understanding of network isolation and security best practices.

Familiarity with private/internal AWS architectures (no public access).

Nice to Have (Not Mandatory)

Experience supporting fintech / regulated environments.

Knowledge of containerized workloads (Docker).

Experience with GPU workloads or ML infrastructure (infrastructure only).

Deliverables

Fully deployed AWS infrastructure as per provided architecture.

Terraform code reviewed and runnable by internal team.

Basic deployment documentation and handover notes.

Key Responsibilities

Set up and manage AWS VPC with private subnets only (no IGW / NAT).

Configure VPC Endpoints (S3, ECR, CloudWatch, KMS, STS, Secrets Manager, ECS).

Provision and harden EC2 GPU instances for inference workloads.

Deploy internal load balancers (NLB / ALB) for private service access.

Configure IAM roles and policies using least-privilege principles.

Deploy ECS Fargate services for internal API/gateway components.

Enable CloudWatch Logs, metrics, and basic alarms.

Assist with Terraform-based infrastructure deployment and validation.

Ensure the system meets the requirement that no data or tokens leave the VPC.

Required Skills

Strong hands-on experience with AWS core services:

EC2 (including GPU instances)

VPC, Subnets, Route Tables, Security Groups

IAM

S3 (private buckets, encryption)

ECR

ECS / Fargate

ALB / NLB

Experience working with Terraform (modules, variables, state).

Good understanding of network isolation and security best practices.

Familiarity with private/internal AWS architectures (no public access).

Nice to Have (Not Mandatory)

Experience supporting fintech / regulated environments.

Knowledge of containerized workloads (Docker).

Experience with GPU workloads or ML infrastructure (infrastructure only).

Deliverables

Fully deployed AWS infrastructure as per provided architecture.

Terraform code reviewed and runnable by internal team.

Basic deployment documentation and handover notes.