AWS System Administrator

About this role

PLAY, GROW and WIN To be a part of Virtuos means to be a creator.   At Virtuos, we harness the latest technologies to make games better and more immersive than ever before. That is why we pride ourselves in constantly pushing the boundaries of possibility since our founding in 2004.  Virtuosi is a team of experts – people who have come together to share their mutual passion for making and playing games. People with the same enthusiasm for exploring new ideas and the constant drive to excel in their field. People who believe in earning success through dedication. At Virtuos, we are at the forefront of gaming, creating exciting new experiences daily. Join us to Play, Grow and Win – together. ABOUT THE POSITION The Senior AWS System Administrator operates, maintains and improves a secure, reliable and cost-conscious AWS platform. The role combines hands-on administration across a multi-account environment with operational leadership, infrastructure automation, disciplined change delivery and recovery preparedness. It provides technical guidance to colleagues and helps translate approved business and architectural requirements into supportable cloud services. Account and organization administration Administer AWS account lifecycles, organizational units and approved guardrails, cross-account access and resource sharing. Validate policy changes and support consolidated billing with Finance and FinOps. Identity and access management Manage least-privilege IAM access and IAM Identity Center integration with Microsoft Entra ID. Coordinate identity lifecycles, access reviews, authentication and privileged or emergency access controls with identity owners, favoring temporary credentials and removing stale access. Networking, connectivity and edge services Operate approved AWS networks, private endpoints, hybrid and cross-region connectivity, maintaining secure routing and access controls. Manage DNS, edge delivery and load balancing; troubleshoot connectivity, health and performance, and review availability and cost with network teams. Security and compliance operations Implement approved security baselines, threat detection, vulnerability management, configuration compliance, edge protection and secret rotation, retaining audit evidence. Coordinate authorized testing and approved remediation with Security, escalating exceptions for risk decisions. PKI and certificate lifecycle Manage certificate issuance, deployment, renewal and expiry monitoring across supported AWS services. Support private CA integration, mutual TLS, revocation and key protection with PKI and Security owners, observing service-specific requirements. Landing zone and platform standards Operate Control Tower landing zones, account enrollment and approved infrastructure-as-code customizations. Maintain versioned Terraform modules, a module registry, secure locked state and platform standards; test changes, address drift and evolve designs with architecture owners. Infrastructure automation and CI/CD Maintain secure infrastructure pipelines, Terraform code and automation with version control, peer review, testing and deployment evidence. Assess impact, dependencies and rollback, preserving approvals and segregation of duties. Compute and operating-system administration Manage EC2 capacity, scaling, quotas and hardened images, including Linux and Windows configuration, patching and vulnerability remediation with tested rollback. Container platforms and registries Operate ECS/Fargate, EKS and ECR, managing capacity, scaling, permissions, registry lifecycle and replication, and tested upgrades. Coordinate secure diagnostics, image remediation and workload troubleshooting with developers. Storage and data protection controls Administer object, block and file storage, archives and approved hybrid access, managing permissions, encryption, capacity, performance and recovery. Apply lifecycle, replication, immutability, retention and deletion controls agreed with data and compliance owners, considering retrieval time and cost. Managed database platform operations Operate approved managed databases, caches and migration services, maintaining availability, capacity, patching, connectivity, monitoring and recovery. Coordinate upgrades, performance investigations and replication health with DBAs and application owners, who retain schema, query, data correctness and migration acceptance decisions. Backup and disaster recovery Maintain centralized backups, retention, protected vaults and supported cross-account or cross-region copies, resolving failures and documenting recovery dependencies. Test approved resilience and disaster-recovery plans against agreed RTO/RPO targets with service owners, recording evidence and corrective actions. Cost, capacity and continuous improvement Monitor costs, anomalies, budgets and allocation tags with FinOps; validate right-sizing and approved resource cleanup without degrading service. Provide utilization evidence for authorized commitment purchases and contribute to Well-Architected reviews and continuous improvement. Stakeholder and supplier engagement Gather operational requirements, contribute to architecture reviews and coordinate technical issues with AWS Support and suppliers. Provide evidence for commercial discussions, leaving negotiation, contracts and spending commitments to authorized decision-makers. Service operations and operational leadership Maintain actionable monitoring, audit logging and alerts against agreed service objectives; lead or support incident restoration, communication and escalation, preserving evidence, coordinating with Security and tracking root-cause and post-incident actions. Deliver risk-assessed, approved changes with validation and rollback; maintain inventories, configuration records, diagrams, procedures and tested runbooks, ensure operationally ready handovers, mentor colleagues, automate safely and escalate technical debt or risks beyond delegated authority. Required capabilities Demonstrated hands-on administration of production AWS environments, including multi-account governance, IAM, networking, compute, storage, monitoring and backup. Sound understanding of the AWS shared responsibility model, least privilege, encryption, secure configuration and operational resilience. Ability to diagnose complex infrastructure issues across service boundaries and manage incidents and changes with clear risk and escalation decisions. Practical Terraform, Git and CI/CD experience, with the ability to create maintainable infrastructure code and review deployment plans. Competence with the AWS CLI and scripting in Python, Bash or PowerShell, plus Linux and/or Windows administration relevant to the estate. Working knowledge of container operations and managed database infrastructure, including when to involve specialist teams. Strong written documentation, stakeholder communication and technical mentoring skills. Ability to prioritize competing operational demands, work independently within delegated authority and collaborate on cross-team problems.  Preferred capabilities Relevant current AWS operations, architecture, DevOps, security or networking certification. Deeper experience with Control Tower, IAM Identity Center and Entra ID integration; hybrid and cross-region networking; EKS or ECS/Fargate; PKI and mutual TLS; or regulated data retention and recovery testing. Founded in 2004, Virtuos is one of the largest independent video game development companies. We are headquartered in Singapore with offices in Asia, Europe, and North America. Specializing in full-cycle game development and art production, we have delivered high-quality content for more than 1,500 console, PC, and mobile games. Our clients include 23 of the top 25 gaming companies worldwide. About Our Team Officially launched in 2022, Virtuos Kuala Lumpur (KL) is home to a multicultural team of talented and passionate game developers. Led by a team of industry veterans, we cover a wide range of technical capabilities from art to engineering at Virtuos KL. As our team continues to expand, we welcome new talent at multiple career entry points to join us and make games better, together! • A rewarding career path with long-term career potential • Network of highly talented and driven peers • Exposure to some of the biggest names and franchises in the industry • Competitive salary and social benefits • Develop your expertise in the latest platforms and technology  • Constant training and career development to enhance personal value and skills • Career and international mobility opportunities with Virtuos Internal Mobility Program • Awesome staff activities and company-sponsored outings • Enjoy a healthy work-life balance environment People matter. Diverse opinions and experiences matter. At Virtuos, our talented teams are the cornerstone of our success, and we recognize that fostering and advocating for inclusivity is at the center of what we do best - we make games better, together. Virtuos is proud to be an equal opportunity employer that embraces diversity of thought, expression, culture, and backgrounds.