Fintech Jobs in Texas (NOW HIRING)

About the Role

APEX Fintech's AWSWorkSpacesplatform is a production-grade, multi-region AWS serverless system that automates the full lifecycle of AmazonWorkSpacesvirtual desktops for a multi-tenant VDI program spanning hundreds of active desktops.We'rehiring a Senior AWS Cloud Engineerwho will take full ownership of theplatform'sarchitecture - designing, building, and automating the systems that keep it running - while serving as the go-to expert for day-to-day production incidents.You'llbring a security- and compliance-first mindset to every decision, ensuring the platform holds up to the standards our regulated fintech environment demands.

Duties/Responsibilities

• Own the architecture, code quality, and evolution of the platform - driving decisions on new capabilities, DR testing, scaling, and TerraformIaC.

• Serve as the primary escalation point for engineering questions related to the system.

• Diagnose and resolve production incidents quickly, tracing failures end-to-end across Lambda, SQS, DynamoDB, SNS, and CloudWatch Logs.

• Support day-to-day VDI operations: image builds, bundle management, directory configuration, client connectivity, and user-facing troubleshooting.

• Bridge the gap between infrastructure automation and end-user desktop experience.

• Mentor junior engineers on AWS serverless architecture, operational best practices, and production troubleshooting.

• Own the deployment and integration of Datadog monitoring for the AWS VDI stack, including metrics, logs, traces, dashboards, SLOs, and alerting.

Educationand Experience

• At least 5 yearsofhands-on AWS experience, including 3+ yearswithserverless or event-driven architecture in production.

• 2+ yearsof experiencewith AmazonWorkSpacesin a production environment.

• Multi-region AWS deployment experience; CCR or active-active DR experience is a strong plus.

• Must have written, deployed, and debugged Python Lambda functions in production.

• 2+yearsof work experience with Terraform to manage realproductionAWS infrastructure, including remote state.

• Mustdemonstrateworking experience withWorkSpaceslifecycle management, includingcreate,update,delete, andrebuildoperations.

• ExpertisewithPython 3.14 Lambda development - handlers, environment variables, error handling.

• Experience withLambda concurrency, timeouts, retries, and DLQ behavior.

• Ability to create,update, andtroubleshoot AWS Step Functions, includingSTANDARD workflows, states, Wait, Choice,andTask.

• API Gateway - EDGE endpoints, SQS service integration, API key authentication.

• Experience with DynamoDB single-table design, includingpartitionkeys, sortkeys, GSIs, and related access patterns.

• Mustdemonstrateexpertisewith SNS,includingtopic subscriptions, message filtering,anderror notification patterns.

• Experienceworking with Terraform inmulti-region deployments and provider configuration.

• Configuration management using Ansible, includingplaybooks, roles, inventory management, idempotent task design,andAnsible Vault.

• Hands-on experience with observability and resilience tooling (CloudWatch Logs Insights/metrics/alarms, Route53 health checks/failover routing) as well as Datadog for serverless observability.

• AWS KMS Multi-Region Keys, includingreplication, key policy,andencryption context.

• AWS IAM administration - users, groups, roles, permission boundaries, and cross-account role assumption.

Ways toStand Out

• VPC design forWorkSpaces(subnets, route tables, NAT Gateway, Transit Gateway, security groups)

• Custom domain management (Route53, ACM certificates, API Gateway custom domains)

• Cost optimization forWorkSpaces.

• Infrastructure security scanning (Checkov,tfsec)

• Knowledge of security frameworks and controls, includingCIS benchmarks, NIST, device compliance,andconditional access.

• Experience supporting regulated environments, such asFINRA, SEC, FedRAMP, NIST,orSOCenvironments.

• Strong communicationskills, with the abilityto explain technical decisions to both engineering peers and non-technical stakeholders.

Other Preferred Qualifications

• AWS Solutions Architect - Professional

• AWS DevOps Engineer - Professional

• AWSSysOpsAdministrator - Associate

• Cross-Region Replication (CCR) design patterns / multi-region DR architecture

• Experience with ITIL practices, servicemanagementtooling, and building actionable SLOsandSLIs.

• Familiarity with compliance and regulatory requirements in financial services.

• Experience with DLP (Data Loss Prevention) and endpoint security in regulated environments.
  

Work Environment

• This joboperatesin a hybrid office environmentthreedays per week.