Software Development Engineer 5, AWS Cloud Architect

The Church of Jesus Christ of Latter-day Saints

. Provide architecture oversight for existing network topologies and lead the design of new layered, segmented, multi-AZ/region networks .

Posted 11/7/2026full-timeLehi • Utah • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expert knowledge in AWS cloud networking and security architecture, with a strong focus on VPC, IAM, and DNS management. Proven ability to lead architectural direction, implement resilient solutions, and ensure compliance within high-availability enterprise environments.

Highest-signal resume keywords

AWS Cloud Networking ArchitectureVPC Management and DesignIAM Policy StrategiesDNS Management and GovernanceAgile Software Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS IAMVPCDirect ConnectRoute 53CloudFrontALB/ELBWAF/Shield/ImpervaNATIPSecRBAC/ABAC

Soft Skills

Exceptional Communication SkillsLeadership and MentoringProblem ResolutionCross-Functional Team LeadershipCustomer Interaction

Tools & Technologies

AWS WorkMailCloudFrontDDoS/WAF SolutionsTraffic EngineeringContinuous IntegrationContinuous Delivery

Certifications & Qualifications

AWS Advanced Networking SpecialtyAWS Security Specialty

Industry Keywords

Multi-Account AWS EnvironmentsZero-Trust PrinciplesHigh-Availability Enterprise EnvironmentsAudit and Evidence CollectionArchitecture Governance

Tech Stack

Tools & technologies

AWSCloudDNSFirewallsSDLC

About the role

Key responsibilities & impact

Provide architecture oversight for existing network topologies and lead the design of new layered, segmented, multi-AZ/region networks
Own end-to-end routing architecture and traffic flows across CloudFront, ALB/ELB/NLB, DDoS/WAF solutions, reverse proxies, on-premises load balancing, language tags, and cross-domain controls
Re-architect complex network boundaries and firewalls using AWS-native constructs
Steward VPCs, subnets/AZs, NACLs, security groups, routing, NAT, Transit Gateway, Direct Connect, IPSec, VPC peering/sharing, PrivateLink, static IP management, and WAN
Govern DNS for product and corporate domains, including MX, DKIM, DMARC, SPF records, and domain registration approvals
Ensure resilient, least-privilege, auditable automation for DNS updates and changes
Set direction for AWS Organizations, including OU structure, SCPs, service integrations, account vending, and guardrails
Define and evolve RBAC/ABAC and IAM policy strategies for secure service-to-service access across accounts and regions
Partner with AWS Support and internal stakeholders to resolve high-severity issues
Oversee AWS WorkMail and related account-provisioning flows
Partner with Security on infrastructure posture, threat modeling, controls, and Security Committee discussions
Champion production-readiness and compliance within the FamilySearch SDLC
Serve on or advise the Architecture Review Board, URI Naming governance, Privacy, Tech Plan, and Business Continuity work
Establish standards preventing drift and namespace chaos for URI and domain usage
Meet with platform users, synthesize pain points, generalize point solutions into platform capabilities, and partner with product management on roadmaps
Advance shared data and observability initiatives to improve cost, performance, and decision-making
Provide design, implementation leadership, or advisory support for key application infrastructure services
Participate in a controlled privileged-access rotation with strict least-privilege, separation-of-duties, auditable change-management, and policy-compliance requirements

Requirements

What you’ll need

Bachelor’s degree in computer science, closely related field or equivalent experience
8 years of industry-recognized, progressive and relevant professional experience
6+ years in large-scale cloud networking and security architecture, including multi-account AWS environments
Experience completing two or more major cycles in architecting entire systems and successfully implementing them through two or more development cycles
Strong understanding of Agile Software Development methodologies and principles
Evidence of external industry validation and enterprise-grade vision
Experience evaluating vendors and identifying critical gaps in their offerings
Exceptional written and verbal communication skills at all levels of the business
Ability to interact effectively with customers, present solutions, and lead customers through decisions
Strong understanding of technical use cases supported by the stack/platform
Ability to lead cross-functional and interdepartmental product or project teams and highly skilled engineers and managers
Knowledge of technology trends and their relevance to the Church
Expert knowledge of cloud-based platforms and services
High-level understanding of DevSecOps
Ability to make architectural choices based on solid principles and practical experience
Ability to set technical architectural direction without supervision
Knowledge of Continuous Integration and Continuous Delivery principles
Outstanding troubleshooting and problem-resolution ability
Demonstrated leadership, mentoring, and peer-training skills
Expert-level knowledge of applicable software, computer languages, and code
Must be a member of The Church of Jesus Christ of Latter-day Saints and currently temple worthy
Deep hands-on experience with VPC, TGW, Direct Connect, PrivateLink, Route 53, CloudFront, ALB/ELB, WAF/Shield/Imperva, NAT, IPSec, NACLs/SGs, and regional traffic engineering
Expert AWS IAM knowledge, including roles, policies, permission boundaries, federation/SSO, cross-account patterns, SCPs, RBAC/ABAC, and service-to-service authentication/authorization
Experience designing segmented network topologies, applying zero-trust principles, and migrating legacy firewalls to AWS-native controls
Strong DNS competency with A, CNAME, NS, MX, DKIM, DMARC, and SPF records
Experience partnering with Security, participating in architecture governance, and supporting incident/BCP readiness within an SDLC
Experience in regulated, high-availability enterprise environments with audit and evidence collection
Experience with edge policies, CDN tuning, and bot/abuse mitigation
Familiarity with AWS WorkMail, account vending/landing-zone automation, and drift detection
Track record of organization-wide migrations/upgrades and production-readiness standards
Preferred: Master’s degree in a related field
Nice to have: AWS Advanced Networking Specialty, Security Specialty, or equivalent portfolio

Benefits

Comp & perks

Church employment benefits are referenced, but specific benefits are not listed in the posting
Equal opportunity employer and reasonable accommodations for qualified individuals with known disabilities