AWS Cloud Database Administrator

About Lenovo

Lenovo is a global technology leader generating US$83 billion in revenue, ranked #153 on the Fortune Global 500, and serving millions of customers across 180 markets. Renowned as the largest PC company worldwide, Lenovo invests heavily in AI-enabled, AI-ready, and AI-optimized devices, infrastructure solutions, software, and services. The company is committed to innovation that promotes inclusivity, trustworthiness, and smarter technology for everyone globally. Lenovo is publicly traded on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992).

Role Overview

This role involves the design, deployment, and ongoing operational management of database platforms spanning AWS, Microsoft Azure, and on-premises environments. The position covers responsibilities related to both project implementation and daily business-as-usual operations.

Key Responsibilities

• Design and deploy Microsoft SQL Server solutions on Azure (including Azure VM, SQL Managed Instance, Azure SQL Database), AWS platforms (EC2, RDS), and on-premises SQL Server instances.
• Handle database administration such as monitoring, patching, upgrades, and configuration management across multiple platforms.
• Administer native Microsoft SQL Server backups (full, differential, transaction log) and use cloud-native backup tools like Azure Backup for SQL VMs and SQL Managed Instances.
• Set up and manage Long-Term Retention (LTR), Point-in-Time Restore (PITR), and Yearly Retention (YTR) policies according to data compliance and retention standards.
• Oversee Transparent Data Encryption (TDE) certificate lifecycles—including creation, backup, rotation, and secure custody—for on-premises, EC2/Azure VM, and managed cloud services.
• Conduct periodic restore tests and disaster recovery drills while maintaining documented Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
• Manage database security involving logins, role-based access control (RBAC), auditing, integration with Azure Key Vault for customer-managed keys, and SQL Server Audit configuration.
• Optimize performance via query tuning, index maintenance, and analysis using tools like Query Store, Extended Events, AWS Performance Insights, and Azure SQL Intelligent Insights.
• Automate routine administrative tasks using T-SQL and PowerShell while supporting database deployments.
• Ensure adherence to security compliance benchmarks including Hardening Baselines, Auditor-General's Office mandates, IM8 instructions, and vulnerability management.
• Provision and oversee cloud database infrastructure using infrastructure-as-code tools such as Terraform, ARM templates, or Bicep.
• Develop and update technical documentation including architecture designs, runbooks, and standard operating procedures.
• Adapt swiftly within a dynamic cloud environment, managing shifting priorities, emerging technologies, and evolving business needs.
• Efficiently handle multiple simultaneous workloads, balancing implementation projects, daily operations, and incident responses while shifting focus smoothly across teams and platforms.
• Collaborate closely with application project managers, development teams, participate in on-call rotations for critical incident response, and conduct thorough root cause analyses.
• Communicate complex technical information effectively to both technical colleagues and non-technical stakeholders, demonstrating strong written and verbal skills.
• Exhibit strong self-management abilities to independently organize, prioritize, and deliver database engineering tasks with limited supervision.

Technical Skills

• Proficiency in Azure SQL Server solutions: Azure VM, SQL Managed Instance, Azure SQL Database, Elastic Pools, Failover Groups, Geo-Replication, along with monitoring via Azure Monitor and security using Azure Defender.
• Experience with AWS SQL Server deployments on EC2 and RDS platforms, including Multi-AZ configurations, EBS storage, CloudWatch monitoring, IAM role management, and Secrets Manager.
• Expertise in on-premises SQL Server versions 2016 through 2022 using technologies like Always On Availability Groups, Failover Cluster Instances, Log Shipping, and SQL Server Agent.
• Backup and recovery knowledge including native SQL Server backups, Azure Backup, LTR/PITR/YTR retention, with familiarity in Veeam and Commvault as advantages.
• Security management skills involving TDE certificate administration, Azure Key Vault integration for customer-managed keys, Dynamic Data Masking, Always Encrypted features, and Row-Level Security policies.
• Scripting and automation competencies with essential skills in T-SQL and PowerShell; experience with Python, Terraform, ARM/Bicep templates, and Git is advantageous.

Certifications and Experience

• Possession of at least one of the following certifications: DP-300 (Administering Relational Databases on Microsoft Azure) or DBS-C01 (AWS Certified Database Specialty).
• Preferred additional certifications include AZ-104 (Microsoft Azure Administrator) and AWS SAA-C03 (AWS Certified Solutions Architect – Associate).
• Minimum of 7 years' experience in database administration or engineering.
• At least 4 years managing cloud-based databases on AWS or Azure platforms.
• Degree in Computer Science, IT, or related disciplines is required; equivalent practical experience is acceptable.

Equal Opportunity

Lenovo is committed to equal employment opportunities without discrimination based on race, color, sex, age, religion, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.