AWS System Administrator

PLAY, GROW and WIN

To be a part of Virtuos means to be a creator.

At Virtuos, we harness the latest technologies to make games better and more immersive than ever before. That is why we pride ourselves in constantly pushing the boundaries of possibility since our founding in 2004.

Virtuosi is a team of experts - people who have come together to share their mutual passion for making and playing games. People with the same enthusiasm for exploring new ideas and the constant drive to excel in their field. People who believe in earning success through dedication.

At Virtuos, we are at the forefront of gaming, creating exciting new experiences daily. Join us to Play, Grow and Win - together.

ABOUT THE POSITION

The Senior AWS System Administrator operates, maintains and improves a secure, reliable and cost-conscious AWS platform. The role combines hands-on administration across a multi-account environment with operational leadership, infrastructure automation, disciplined change delivery and recovery preparedness. It provides technical guidance to colleagues and helps translate approved business and architectural requirements into supportable cloud services.

Account and organization administration

Administer AWS account lifecycles, organizational units and approved guardrails, cross-account access and resource sharing. Validate policy changes and support consolidated billing with Finance and FinOps.

Identity and access management

Manage least-privilege IAM access and IAM Identity Center integration with Microsoft Entra ID. Coordinate identity lifecycles, access reviews, authentication and privileged or emergency access controls with identity owners, favoring temporary credentials and removing stale access.

Networking, connectivity and edge services

Operate approved AWS networks, private endpoints, hybrid and cross-region connectivity, maintaining secure routing and access controls.

Manage DNS, edge delivery and load balancing; troubleshoot connectivity, health and performance, and review availability and cost with network teams.

Security and compliance operations

Implement approved security baselines, threat detection, vulnerability management, configuration compliance, edge protection and secret rotation, retaining audit evidence. Coordinate authorized testing and approved remediation with Security, escalating exceptions for risk decisions.

PKI and certificate lifecycle

Manage certificate issuance, deployment, renewal and expiry monitoring across supported AWS services. Support private CA integration, mutual TLS, revocation and key protection with PKI and Security owners, observing service-specific requirements.

Landing zone and platform standards

Operate Control Tower landing zones, account enrollment and approved infrastructure-as-code customizations. Maintain versioned Terraform modules, a module registry, secure locked state and platform standards; test changes, address drift and evolve designs with architecture owners.

Infrastructure automation and CI/CD

Maintain secure infrastructure pipelines, Terraform code and automation with version control, peer review, testing and deployment evidence. Assess impact, dependencies and rollback, preserving approvals and segregation of duties.

Compute and operating-system administration

Manage EC2 capacity, scaling, quotas and hardened images, including Linux and Windows configuration, patching and vulnerability remediation with tested rollback.

Container platforms and registries

Operate ECS/Fargate, EKS and ECR, managing capacity, scaling, permissions, registry lifecycle and replication, and tested upgrades. Coordinate secure diagnostics, image remediation and workload troubleshooting with developers.

Storage and data protection controls

Administer object, block and file storage, archives and approved hybrid access, managing permissions, encryption, capacity, performance and recovery. Apply lifecycle, replication, immutability, retention and deletion controls agreed with data and compliance owners, considering retrieval time and cost.

Managed database platform operations

Operate approved managed databases, caches and migration services, maintaining availability, capacity, patching, connectivity, monitoring and recovery. Coordinate upgrades, performance investigations and replication health with DBAs and application owners, who retain schema, query, data correctness and migration acceptance decisions.

Backup and disaster recovery

Maintain centralized backups, retention, protected vaults and supported cross-account or cross-region copies, resolving failures and documenting recovery dependencies. Test approved resilience and disaster-recovery plans against agreed RTO/RPO targets with service owners, recording evidence and corrective actions.

Cost, capacity and continuous improvement

Monitor costs, anomalies, budgets and allocation tags with FinOps; validate right-sizing and approved resource cleanup without degrading service. Provide utilization evidence for authorized commitment purchases and contribute to Well-Architected reviews and continuous improvement.

Stakeholder and supplier engagement

Gather operational requirements, contribute to architecture reviews and coordinate technical issues with AWS Support and suppliers. Provide evidence for commercial discussions, leaving negotiation, contracts and spending commitments to authorized decision-makers.

Service operations and operational leadership

Maintain actionable monitoring, audit logging and alerts against agreed service objectives; lead or support incident restoration, communication and escalation, preserving evidence, coordinating with Security and tracking root-cause and post-incident actions.

Deliver risk-assessed, approved changes with validation and rollback; maintain inventories, configuration records, diagrams, procedures and tested runbooks, ensure operationally ready handovers, mentor colleagues, automate safely and escalate technical debt or risks beyond delegated authority.

Required capabilities

Demonstrated hands-on administration of production AWS environments, including multi-account governance, IAM, networking, compute, storage, monitoring and backup. Sound understanding of the AWS shared responsibility model, least privilege, encryption, secure configuration and operational resilience. Ability to diagnose complex infrastructure issues across service boundaries and manage incidents and changes with clear risk and escalation decisions.

Practical Terraform, Git and CI/CD experience, with the ability to create maintainable infrastructure code and review deployment plans. Competence with the AWS CLI and scripting in Python, Bash or PowerShell, plus Linux and/or Windows administration relevant to the estate. Working knowledge of container operations and managed database infrastructure, including when to involve specialist teams.

Strong written documentation, stakeholder communication and technical mentoring skills. Ability to prioritize competing operational demands, work independently within delegated authority and collaborate on cross-team problems.

Preferred capabilities

Relevant current AWS operations, architecture, DevOps, security or networking certification. Deeper experience with Control Tower, IAM Identity Center and Entra ID integration; hybrid and cross-region networking; EKS or ECS/Fargate; PKI and mutual TLS; or regulated data retention and recovery testing.