Cloud Infrastructure Engineer

Aspire Software is looking for a AWS Cloud Infrastructure Engineer to join our team in Lebanon.

Here is a little window into our company: Aspire Software operates and manages wholly owned software companies, providing mission-critical solutions across multiple verticals. By implementing industry best practices, Aspire delivers a time sensitive integration process, and the operation of a decentralized model has allowed it to become a hub for creating rapid growth by reinvesting in its portfolio.

About the Role:

We're hiring a Cloud Infrastructure Engineer to join our Professional Services team and take real ownership of the AWS environment that runs WeSuite and our hosted customer environments.

This is an AWS-first role — our entire platform runs on AWS, and you'll be working in it every day.

This is a hands-on engineering role, not a ticket queue. You'll work directly with the Head of Professional Services on a live roadmap: migrating workloads off our legacy AWS account, driving down run-rate cost, hardening our security posture, modernizing our deployment pipelines, and standing up infrastructure for new products. The work is mostly internal-facing — supporting employees and the customers whose environments we host — but you'll also work directly with customers during new deployments, on networking and connectivity questions, and occasionally alongside our sales team when a prospect is evaluating a move onto our hosted platform.

If you like owning problems end to end, writing the automation that keeps them from recurring, and documenting it so the next person doesn't have to rediscover it; this role will suit you.

What You'll Work On

These are real projects on our current roadmap:

• Legacy account migration. Move remaining workloads off our legacy AWS account into our
• Landing Zone Accelerator environment — Elastic Beanstalk environments, EC2 instances, associated networking and Elastic IP strategy.
• Cost optimization. Continue an active effort to reduce our AWS run rate: right-sizing, storage tiering, reserved capacity strategy, decommissioning idle resources, and keeping anomaly detection and budget alerting in front of the people who need to see it.
• Security and compliance. Work through Security Hub findings across our production accounts, tune GuardDuty and Inspector, tighten IAM Identity Center permission sets, and support our ongoing SOC 2 program.
• Deployment automation. Improve and extend our release pipelines, including database refresh automation against RDS SQL Server and configuration-encryption tooling for IIS-hosted sites.
• You'll also make active revisions to our CloudFormation templates, so newly provisioned resources come up consistently and with less manual work each time.