Position Title: Cloud Systems Engineer About AVB: AVB is a fast-growing, stable company that has a firm mission to do whatever it takes to keep our members profitably in business. Our vision is to deliver best in class growth solutions and service fueled by a passionate mission belief, innovation, and an unwavering commitment to doing what is right for our members, organization, and team members. AVB has an experienced development team, smart strategy team, bright and creative designers, along with the rest of our dream team of enthusiastic, entrepreneurial minded individuals who want to help drive the success of our members! We offer competitive salaries, full benefits, a flexible remote work environment, an employee reimbursement program to support enriching your life, EAP, employee discounts, a WFH stipend, an annual allowance for AVB apparel, 401k options, a robust sick time policy, and 5 Floating Holidays per year, along with a minimum of 10 days of vacation time that starts accruing from your first day. In addition, from time to time, our team members will be required to engage in travel to attend AVB’s Annual All-Employee Meeting, as well as other travel obligations which may be required of the position- such as meetings with members, attendance at conventions, and other events, where you will represent AVB! We are always looking for smart, resourceful, and dynamic people to join the team, so if you are looking for a company that will welcome you, collaborate with you, challenge you, and help develop your skills to the next level- then we are looking for you! We are geared up for growth, are you ready to grow with us? Home - AVB Marketing Position Summary/Objective: As a Cloud Systems Engineer, you share ownership of AVB's multi-account AWS environment, working alongside the Cloud System Administrator on infrastructure and operations. You also back up the team's security lead, covering security operations, alert response, and compliance work in their absence and assisting on major security projects. You are equally comfortable patching a production Linux fleet and working a security finding to closure. You support SaaS production environments that serve AVB's members, collaborate closely with software development teams, and help maintain AVB's PCI DSS compliance. You work independently, document thoroughly, and keep stakeholders informed while resolving problems. Supervisory Responsibilities: N/A Essential Functions and Responsibilities: Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions. Infrastructure and Operations: Deploy, secure, document, and maintain AWS infrastructure across a multi-account organization, including EC2 instances and AMIs, VPCs, peering, route tables, security groups, DNS, Global Accelerator, and CIDR planning Share ownership of production patching with the Cloud System Administrator, patching on a regular schedule and coordinating maintenance windows with development teams Install, configure, troubleshoot, and maintain Windows and Linux servers, from simple to complex issues Share management of access across AWS IAM, Microsoft Entra ID, and Active Directory with the Cloud System Administrator, and fulfill access requests Set up, monitor, and test backup and restore across AWS-native and enterprise backup platforms; participate in disaster recovery planning and testing Perform performance monitoring and capacity planning, including Reserved Instance and capacity reviews Support production infrastructure for AVB's SaaS products, working with developers to diagnose and resolve performance bottlenecks Perform root-cause analysis for service interruptions and implement preventive measures Performs any other duties as assigned Security Operations: Triage and respond to security alerts, and work findings from MDR, EDR, and AWS-native security services through to resolution Perform vulnerability scanning, remediation, and system hardening, applying a consistent remediation standard across all environments Support PCI DSS compliance, including audit evidence collection and penetration testing Configure and maintain firewalls and AWS WAF rules Support DNS filtering and other security tooling, and contribute to evaluating and replacing security vendors Use AI-assisted tools, primarily Claude, to evaluate and harden environments within approved, safe guardrails Cover security operations, alert response, and compliance tasks when the security lead is unavailable, and assist the security lead on major security projects Performs any other duties as assigned Shared Responsibilities: Participate in a shared on-call rotation for infrastructure and security events Cross-train with team members so that no single person is a point of failure for any system or process Create and maintain system, policy, and procedure documentation Represent the team as a subject matter expert to internal teams, vendors, and external partners Liaise with vendors and other IT staff to resolve problems Performs any other duties as assigned Remote Work/Travel: This position will work remotely from a home address and is subject to AVB's Remote Work policies and procedures in effect at the time of employment. This role requires periodic travel of approximately four to five trips per year, including attendance at AVB's Annual All-Employee Meeting, member meetings, conventions, trade shows, and other company-related events. Any requests for accommodations related to required travel, including medical accommodations, should be directed to Human Resources. Required Skills and Abilities: Strong working knowledge of core AWS services: EC2, VPC networking, IAM, Organizations, Systems Manager, CloudWatch, and RDS Hands-on use of AWS security services, including GuardDuty, Security Hub, WAF, CloudTrail, and AWS Config Linux and Windows server administration and troubleshooting Scripting in Bash and Python; PowerShell for Windows administration Configuration management and Infrastructure as Code with Ansible, plus Terraform or CloudFormation Vulnerability management and system hardening using industry benchmarks such as CIS Working knowledge of EDR, MDR, and SIEM platforms Solid understanding of network fundamentals, firewalls, and DNS, particularly in a cloud environment Sound judgment and discretion when handling sensitive systems, credentials, and cardholder data environments Both oral and written communication skills are vital for relaying important information, training staff, and communicating about solutions to complex problems Ability to prioritize work and resources across support tasks and projects based on short- and long-term needs; relies on experience and judgment to plan and accomplish tasks Ability to adopt and learn new tools and technologies and stay current on industry best practices Education and Experience: BS in Computer Science, Information Systems, Cybersecurity, or equivalent experience 3+ years' experience deploying, securing, and operating production environments in AWS 2+ years' hands-on security operations experience, including alert triage, vulnerability remediation, and incident response 3+ years' experience administering Windows and Linux servers Experience running patch management for production systems on a recurring schedule Experience working in a PCI DSS or similarly regulated environment (SOC 2, HIPAA, or equivalent) Experience with Active Directory and Microsoft Entra ID Experience supporting software development teams and SaaS production environments Preferred Qualifications: AWS Certified SysOps Administrator or AWS Certified Solutions Architect – Associate or Professional Other relevant security certifications Experience supporting PCI DSS assessments and audits Experience with enterprise MDR, EDR, and backup platforms Experience managing AWS Systems Manager Patch Manager and Session Manager at scale Experience using AI tools in operations or security workflows Microsoft 365 administration experience Physical Requirements: Prolonged periods of sitting at a desk and working on a computer Ability to travel when required – with proper accommodations, if necessary AVB is committed to Equal Employment Opportunity (EEO) and to compliance with all Federal, State and local laws that prohibit employment discrimination on the basis of race, color, age, natural origin, ethnicity, religion, gender, pregnancy, marital status, sexual orientation, gender identity and expression, citizenship, genetic disposition, disability or veteran's status or any other classification protected by State/Federal laws. This job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities that are required of the employee.Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.