AWS Solution Architect

BRJ's infrastructure spans AWS (EC2, SES, storage, networking) and Cloudflare (Workers, R2, D1, DNS). It is deliberately lean today; your job is to keep it that way while making it more reliable, more secure and ready for the next stage of growth — more journals, more automation, more integrations.

This is an architect-who-ships role: you will design the target architecture and also implement the important parts yourself — infrastructure as code, deployment pipelines, monitoring, backup and recovery.

• Define and own the cloud architecture across AWS and Cloudflare, including the migration path from hand-managed instances to infrastructure as code.
• Harden security: IAM hygiene, network boundaries, secret management, backup and disaster-recovery drills.
• Build observability — metrics, alerting and log aggregation — so problems surface before users notice.
• Keep cloud costs deliberate and small; we value frugal architecture.
• Support the development team with CI/CD improvements and environment tooling.

• 5+ years in infrastructure/DevOps roles with deep, hands-on AWS experience (EC2, IAM, VPC, SES, S3).
• Infrastructure-as-code fluency (Terraform, CloudFormation or CDK).
• Strong Linux administration and networking fundamentals.
• A security-first mindset and experience running small production estates responsibly.
• AWS Solutions Architect certification (Associate or Professional), or the demonstrable equivalent.

• Cloudflare Workers/R2/D1 experience.
• PostgreSQL operations: replication, backups, upgrades.
• Experience supporting a small product-engineering team as the sole infra owner.