Senior Systems Architect

Job description

**Senior Systems Architect** Infomedia Americas (SimplePart) | Atlanta, GA On-site (2-3 days/week) | Full-Time **About SimplePart** SimplePart, part of Infomedia’s global automotive SaaS platform, operates approximately 2,750 dealer websites across 25+ OEM catalogs. Our parts e-commerce solutions serve dealership networks globally, processing transactions across multiple payment integrations in a PCI DSS-regulated environment. We are entering a pivotal modernization phase while maintaining rigorous compliance with PCI DSS 4.0 and ISO 27001 and pursuing SOC 2 certification. **The Opportunity** As Senior Systems Architect, you will own the architectural vision for SimplePart’s infrastructure end-to-end through maintaining the reliability and security of our current global colocation environment while designing and building the AWS platform that will replace it. This role is both hands-on and planning. You will need to help maintain our current stack and stand up the target-state cloud environment. You’ll work across four colocation datacenters (Atlanta, Amsterdam, London, Portland), owning network design and operations, security posture, and compliance readiness, while architecting and executing the migration of workloads into a modern, scalable, and compliant AWS environment. Beyond the technical work, you’ll serve as a technical leader through technical mentoring, setting standards, and shaping the direction of the infrastructure and security organization through a multi-year transformation. **Key Responsibilities** **Network Architecture & Operations** - Own the design, implementation, and ongoing optimization of network architecture across all colocation sites and cloud environments. - Architect and manage network segmentation, VLANs, VPN tunnels, routing, DNS, and DHCP across a geographically distributed infrastructure. - Administer and optimize pfSense firewalls and Snort IDS/IPS, ensuring network integrity and compliance with segmentation requirements. - Cloudflare WAF and proxy configurations to protect public-facing dealer websites and e-commerce applications. - Design hybrid connectivity solutions bridging on-premises datacenters and AWS as workloads migrate. **Infrastructure & Systems Architecture** - Maintain and optimize Windows Server environments (2016–2022) across production, staging, and development tiers. - Manage Active Directory, IIS, Group Policy, and supporting services for dealer websites. - Manage Proxmox virtualization environments, optimizing resource allocation and infrastructure flexibility. - Design and maintain comprehensive disaster recovery and backup strategies. - Participate in a 24/7/365 on-call rotation for critical incident response. **Cloud Migration & Modernization** - Evaluate and recommend cloud-native replacements for on-premises services across compute, storage, networking, and monitoring. - Architect infrastructure to support the modernization of SimplePart’s application stack and data platform, including migration from legacy systems. - Establish infrastructure-as-code practices (Terraform, CloudFormation, or equivalent) and cloud operational standards. **Security, Compliance & Risk** - Serve as a primary technical resource for PCI DSS 4.0 audit readiness and ongoing compliance across all applicable requirements. - Support ISO 27001 compliance maintenance and contribute to SOC 2 certification efforts. - Oversee vulnerability assessments using Tenable/Nessus and drive remediation priorities across the environment. - Support and improve security tooling: Microsoft Defender, DUO MFA, and Cloudflare security configurations. - Ensure cryptographic standards, access controls, and segmentation testing meet current compliance requirements. - Maintain detailed documentation for network diagrams, system designs, configurations, and compliance artifacts. **Technical Leadership** - Serve as the senior technical authority on the infrastructure and security team, setting architectural direction and standards. - Mentor and develop junior team members through hands-on guidance and knowledge sharing. - Drive technical decision-making and build a culture of documentation, automation, and continuous improvement. - Collaborate cross-functionally with development, product, and executive leadership on modernization planning and roadmap execution. **Required Qualifications** - 7+ years of experience in systems engineering, infrastructure architecture, or a similar senior technical role. - Demonstrated experience planning and executing datacenter-to-cloud migrations for production workloads. - Demonstrated experience architecting and building production AWS environments from the ground up. - Broad hands-on experience across AWS core services: VPC, EC2, ECS/EKS, RDS/Aurora, S3, IAM, Route 53, Direct Connect/Transit Gateway, and CloudWatch. - Deep AWS networking expertise: VPC design, network segmentation, Transit Gateway, load balancing, DNS, and hybrid connectivity between cloud and on-premises environments. - Experience designing AWS security and compliance controls using native services such as GuardDuty, Security Hub, Config, CloudTrail, and KMS, including in PCI DSS-regulated environments. - Strong firewall management experience and working knowledge of IDS/IPS systems. - Hands-on experience with Windows Server environments, Active Directory, IIS, and Group Policy at scale. - Advanced PowerShell scripting for automation, system administration, and infrastructure management. - Experience with virtualization platforms (Proxmox, Hyper-V, or VMware). - Working knowledge of PCI DSS compliance requirements and audit processes. - Demonstrated ability to mentor and elevate a technical team. - Strong documentation practices and ability to communicate architectural decisions to technical and non-technical audiences. - Bachelor’s degree in Computer Science, Information Technology, or related field or equivalent professional experience.