Systems Engineer

American Association Of Airport Executives•Alexandria, VA

18d

About The Position

AAAE is an organization that provides products and services to the aviation community that enhances the safety and security at our airports. We are seeking an experienced Systems Engineer with strong AWS infrastructure expertise and hands-on experience managing Microsoft Azure Entra ID to support and secure our cloud-based platforms. The Systems Engineer is responsible for designing, deploying and maintaining cloud infrastructure primarily on AWS, while also owning identity and access management functions in Azure Entra ID. This role requires close collaboration with development, operations, and security teams to ensure reliable, scalable, and secure cloud services across a multi-cloud environment, and will be expected to work on complex assignments and perform a wide range of engineering and operational activities. A self-starter in this role is a must.

Requirements

BS in Computer Science or similar is required
5-7 or more years’ IT experience is required
Experience with various Firewall architectures and Network Security concepts
Strong hands-on experience administering AWS cloud infrastructure in production environments
Practical experience managing Azure Entra ID in an enterprise or multi-cloud setting
Solid understanding of identity and access management (IAM) concepts, SSO, and federation
Support for web server technologies such as IIS.
Must have a good understanding of security vulnerabilities including rule-based access control, ports, and protocols, and virus/malware protections
Strong experience working with virtualized IT infrastructures
Ability to adapt and work on multiple issues simultaneously with the ability to meet deadlines and achieve goals
Strong analytical and problem-solving skills
Excellent interpersonal skills and ability to work as part of a team
Proven decision-making experience with the ability to be autonomous and maintain confidentiality

Responsibilities

Design, deploy, and maintain cloud infrastructure in AWS, including services such as EC2, RDS, S3, CloudFront, VPC, and related networking components.
Implement and manage AWS networking solutions such as VPCs, subnets, route tables, NAT gateways, and VPN connections.
Manage and administer Microsoft Entra ID, including: 1. User and group management 2. Application registrations and enterprise applications 3. SSO and federation 4. Conditional Access and identity security controls
Integrate AWS-hosted applications with Entra ID for authentication and authorization.
Implement and maintain cloud security best practices across infrastructure and identity.
Monitor and maintain cloud environments to ensure high availability, optimal uptime, system performance.
Manage AWS security services, including IAM roles/policies, Security Groups, WAF and KMS encryption.
Implement and manage AWS monitoring tools such as CloudWatch, CloudTrail, and AWS Config.
Perform system updates, patching, and routine maintenance to ensure system integrity.
Support building new systems requirements, and upgrading/ patching existing ones, through use of automation tooling.
Automate system processes using scripting languages like Python, Bash, or PowerShell.
Partner with development, operations, and security teams on architecture, deployments, and incident response.
Design backup, disaster recovery, and high-availability strategies for AWS services.
Stay updated with the latest AWS services, tools, and industry trends.
Maintain flexibility in the approach to work and ability to work outside of normal office hours from time to time for planned/unplanned system upgrades/fixes.
Perform other related duties and assignments as required.