Find Your Next Role

• 5+ years cloud platform engineering with substantial AWS experience 

• Hands-on AWS Organizations and Control Tower implementation at scale: OU design, account vending via Account Factory, baseline guardrails 

• IAM Identity Center / AWS SSO federation deployment with enterprise IdPs (Active Directory, Okta, Azure AD); SAML 2.0 or OIDC configuration 

• Multi-account AWS architecture with Service Control Policies and permission set design 

• Transit Gateway hub-and-spoke networking; Direct Connect provisioning and BGP peering; VPC endpoint configuration for private service traffic 

• Infrastructure as code at production scale: Terraform (preferred) or AWS CloudFormation; experience with module design and CI/CD pipelines for infrastructure changes 

• Security baseline implementation: CloudTrail, Config, Security Hub, GuardDuty, KMS, AWS Backup; understanding of detective and preventive control patterns 

• Strong Git, CI/CD, and code review discipline; ability to operate as a platform engineer rather than a console-clicker 

• Strong written communication for architecture decision records, runbooks, and audit-ready documentation 

• AWS Certified Solutions Architect Professional or AWS Certified Advanced Networking - Specialty 

• AWS Certified Security - Specialty 

• Experience with industrial or operational technology cloud architectures (AWS IoT Greengrass, IoT SiteWise, IoT Core, IoT TwinMaker) 

• Background in telecom, cable, energy, utility, or critical infrastructure cloud platforms 

• Familiarity with NIST SP 800-82 (Operational Technology security) or NERC CIP 

• Experience with AWS Pro Services engagement model and landing zone build patterns 

• FinOps practice familiarity: Cost and Usage Reports analysis, anomaly detection, chargeback models 

• Hashicorp Vault, AWS Secrets Manager rotation, or comparable enterprise secrets management 

• Comfort working alongside AWS Solutions Architects and AWS account team during engagement scoping 

• Design and build the AWS Organization structure with AWS Control Tower: Security, Network, Production, and Non-Production OUs; ten account configuration (VBAS-Prod, VBAS-Data-Lake, VBAS-ML, VBAS-Dev, VBAS-Test, VBAS-Sandbox, Audit, Log Archive, Network, Shared Services) 

• Configure IAM Identity Center; implement SAML 2.0 federation with the Comcast Identity Provider; design and provision permission sets aligned to the six VBAS role categories (Architect, Engineer, Specialist, Operator, Sponsor, Approver); author and version Service Control Policies (SCPs) at the OU level 

• Build the network architecture: Transit Gateway as the multi-account hub, Direct Connect Gateway with BGP peering to Comcast network, VPC endpoint configuration for SiteWise, Timestream, S3, KMS, Secrets Manager and IoT Core, Route 53 Resolver inbound/outbound for hybrid DNS, central NAT Gateway 

• Implement the security baseline: organization-wide CloudTrail with object lock on the Log Archive account, AWS Config recorder and aggregator, Security Hub with AWS Foundational Security Best Practices and CIS AWS Foundations standards subscribed, GuardDuty across all accounts and regions, customer-managed KMS keys with restrictive key policies, AWS Backup with centralized backup vault 

• Establish infrastructure-as-code automation using Terraform (preferred) or AWS CloudFormation; build the CI/CD pipeline for landing zone changes through trunk-based development with pull-request review; integrate static analysis and IaC validation into the pipeline 

• Manage the AWS Professional Services handoff during the landing zone build phase; document operational ownership of every component transitioned from Pro Services to the joint team 

• Operate cost monitoring via Cost and Usage Reports; produce monthly cost reports; identify Reserved Instance and Compute Savings Plan opportunities; coordinate Migration Acceleration Program credit utilization 

• Maintain compliance posture aligned to NIST SP 800-82 baseline for OT-adjacent workloads; coordinate with Comcast IT Security on baseline policy alignment and finding remediation 

• Coordinate with the Platform Operations Engineer on production incident response involving AWS service-level issues; participate in post-mortem for any cloud-platform-related incidents 

• Coordinate with the Config and Change Analyst on AWS Config Rules, configuration baselines, and change governance for platform-level changes 

• Produce architecture decision records (ADRs) for all landing zone and platform-level decisions; maintain the platform operational runbook covering account provisioning, network changes, IAM elevation procedures, and break-glass scenarios 

QA/INTEGRATION ANALYST - PHILADELPHIA, PA (REMOTE)

We are seeking a hands-on QA/Integration Analyst to support a large-scale Virtual Building Automation System (VBAS) initiative focused on simulation validation, cloud-based data pipelines, and HVAC automation workflows. This role is embedded within a cross-functional delivery team and is responsible for planning, executing, and facilitating integration and acceptance testing across multiple AWS-hosted platforms and operational technology environments.

What You'll Bring:

• 3+ years of experience in QA, systems integration testing, technical validation, or acceptance testing
• Experience creating:
  • Formal test plans
  • Test cases and scripts
  • Acceptance criteria documentation
• Ability to validate APIs, integrations, data feeds, and backend systems - beyond traditional UI testing
• Experience with data validation techniques including:
  • SQL queries
  • Schema verification
  • Time-series data analysis
  • Athena or equivalent query platforms
• Experience facilitating UAT sessions with operational or business stakeholders
• Strong written communication skills with the ability to produce audit-ready documentation
• Familiarity with cloud platform testing and security concepts, preferably within AWS environments: IAM, KMS, Service integrations

• Develop and execute integration and acceptance test plans across:
  • AWS-hosted IoT and data lake pipelines
  • Simulation engine on IoT TwinMaker
  • Visualization and dashboard platforms
• Validate simulation performance against historical operational data and document pass/fail criteria against defined accuracy thresholds
• Verify AWS IoT asset models, including:
  • Hierarchy integrity
  • Measurement bindings
  • Edge-to-cloud data ingestion and processing workflows
• Test HVAC automation workflows including:
  • Stage-up and stage-down sequencing
  • Threshold triggers
  • Manual override capabilities
  • Minimum cycle time enforcement
  • Override audit trail verification
• Execute end-to-end data quality validation, including:
  • Schema compliance
  • Field completeness
  • Latency checks
  • End-to-end data lineage
• Verify alerting configurations fire correctly under test conditions across operational and safeguard alert categories 
• Facilitate User Acceptance Testing (UAT) sessions with facility operations stakeholders and document operator sign-off and open items
• Maintain defect log with reproduction steps, severity ratings, and resolution tracking
• Produce acceptance test reports for milestone gate packages

DISTRIBUTED GENERATION APPLICATION PROCESSOR 

POSITION OVERVIEW 

Mid-level role responsible for reviewing and processing residential Distributed Generation (DG) interconnection applications. This position requires the ability to review one-line electrical drawings, verify application completeness against set standards, and handle standard to moderately complex applications. The Mid-Level Processor will work with increasing independence while receiving guidance from Senior Processors on complex technical issues. 

ESSENTIAL RESPONSIBILITIES 

• Review and process residential DG interconnection applications daily through portal system 

• Review one-line electrical drawings to verify alignment with distribution criteria and application data 

• Identify application deficiencies and communicate standardized feedback to installers/customers via portal 

• Maintain 10-day turnaround time for applications in queue 

• Document processing activities and common errors for reporting purposes 

• Escalate complex or unusual applications to Senior Processor for technical guidance 

• Participate in weekly/bi-weekly status meetings with team 

• Review final-stage application photos to confirm installation matches approved specifications 

• Follow established processes for customer/installer follow-up and escalation 

• Assist with training junior processors on portal workflows and standard procedures 

• Identify applications requiring system upgrades for handoff to engineering team 

• Adapt to changing volumes and flexible staffing needs based on application queue 

REQUIRED QUALIFICATIONS 

• 2-3 years of experience in utility applications processing, permitting, technical review, or related field 

• Ability to read and understand electrical one-line drawings and utility diagrams 

• General knowledge of residential solar/DG systems and utility interconnection concepts 

• Experience working with workflow management systems or online portals 

• Strong attention to detail and ability to follow standardized procedures 

• Good written and verbal communication skills 

• Proficiency in Microsoft Office and ability to learn new software systems 

• Comfortable working both independently and collaboratively in team environment 

PREFERRED QUALIFICATIONS 

• Previous experience with utility interconnection applications or permitting processes 

• Familiarity with basic electrical terminology and distribution system concepts 

• Background in solar installation, electrical construction, or utility customer service 

• Experience with CRM or portal-based workflow systems 

• Understanding of NEC or utility standards (training will be provided) 

KEY COMPETENCIES 

• Technical learning ability for understanding electrical concepts and one-line drawings 

• Process-oriented mindset with strong adherence to standards and procedures 

• Time management skills to balance multiple applications and meet deadlines 

• Effective communication for standardized customer/installer feedback 

• Adaptability to new portal system and evolving procedures 

• Team collaboration and willingness to seek guidance when needed 

• Quality focus with ability to catch errors and inconsistencies 

TSG is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. #LI-KL1

SENIOR DISTRIBUTED GENERATION APPLICATION PROCESSOR (Onsite-Houston, TX)

POSITION OVERVIEW 

Senior-level role responsible for reviewing and processing residential Distributed Generation (DG) interconnection applications. This position requires the ability to independently review one-line electrical drawings, verify application completeness against standards, and serve as a subject matter expert for the application processing team. The Senior Processor will handle complex applications, assist with training new team members, and participate in regular touchpoints. 

ESSENTIAL RESPONSIBILITIES 

• Review and process residential DG interconnection applications daily through portal system 

• Analyze one-line electrical drawings to verify compliance with distribution criteria and application specifications 

• Independently identify application deficiencies and communicate standardized feedback to installers/customers via portal 

• Handle escalated or complex applications requiring additional technical review 

• Maintain turnaround time SLA for applications in queue 

• Track and report on processing metrics (applications completed, common errors, timeline exceptions) 

• Mentor mid-level and junior processors on technical standards and portal workflows 

• Participate in weekly/bi-weekly status meetings with team 

• Review final-stage application photos to ensure installation matches approved specifications 

• Identify systemic issues and recommend process improvements to stakeholders 

• Assist with onboarding and training new team members in sandbox environment 

• Escalate applications requiring system upgrades to internal engineering team 

REQUIRED QUALIFICATIONS 

• 3+ years of experience in utility applications processing, permitting, or technical document review 

• Demonstrated ability to read and interpret electrical one-line drawings and utility distribution diagrams 

• Strong understanding of residential solar/DG systems and interconnection requirements 

• Experience with utility or engineering portal systems and workflow management 

• Excellent attention to detail and ability to work independently with minimal supervision 

• Strong written and verbal communication skills for customer/installer interactions 

• Proficiency in Microsoft Office suite and ability to learn new portal systems quickly 

• Experience training or mentoring junior staff members 

PREFERRED QUALIFICATIONS 

• Previous experience with Utility systems or Texas utility interconnection processes 

• Familiarity with NEC, IEEE 1547, or other DG interconnection standards 

• Background in electrical construction, solar installation, or utility operations 

• Experience with Salesforce or similar CRM/portal platforms 

• Call center or customer service experience in technical environment 

KEY COMPETENCIES 

• Technical aptitude for understanding electrical systems without formal engineering degree 

• Ability to manage variable workload (1500-1750 applications/month team capacity) 

• Process adherence and quality focus 

• Problem-solving and critical thinking for application deficiency identification 

• Adaptability to new portal system and evolving processes (AI integration planned) 

• Collaborative approach for working with internal teams and vendor colleagues 

TSG is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. #LI-KL1

The Select Group is hiring a Data Engineer to support the design, implementation, and operation of a large-scale AWS-hosted data infrastructure platform supporting critical building automation and industrial telemetry systems across approximately 1,700 sites. This engineer will develop and maintain ingestion pipelines for BMS, SCADA, HVAC controllers, environmental sensors, and utility metering systems into a centralized AWS data lake leveraging Amazon S3, Lake Formation, and Glue Catalog. The role will also focus on configuring AWS IoT SiteWise asset models, managing time-series data within Amazon Timestream, and ensuring the scalability, reliability, and performance of the overall platform. Working closely with cross-functional engineering teams and AWS architects, this position plays a foundational role in supporting enterprise-wide data operations and infrastructure strategy.

What You'll Bring:
 

• 4+ years in data engineering with production pipeline experience 

• Strong Python and SQL; experience with Spark or Pandas for large-scale data processing 

• Hands-on experience with managed time-series storage: Amazon Timestream, InfluxDB, TimescaleDB, or Historian systems 

• AWS data lake experience: S3 + Glue + Lake Formation + Athena (or willingness to adopt; Azure Data Lake or Databricks experience translates) 

• AWS IoT service exposure: IoT Core, IoT SiteWise, IoT Greengrass (or strong willingness to learn) 

• API and protocol integration experience: REST, MQTT, BACnet, Modbus, OPC-UA 

• Data quality monitoring and alerting — not just pipeline building 

• Git and CI/CD familiarity for pipeline code management; infrastructure-as-code experience (Terraform or AWS CDK) preferred 

Bonus Experience:

• Experience with BMS, SCADA, or industrial IoT data sources 

• Apache Kafka or Amazon Kinesis Data Streams experience 

• dbt (data build tool) or equivalent transformation framework 

• Amazon Managed Grafana or similar observability tooling 

• Experience in critical facility, utility, telecom, or energy sector environments 

• Familiarity with NIST SP 800-82 (OT security) or NERC CIP 

What You'll Do: 

• Design and build data ingestion pipelines from BMS, SCADA, HVAC controllers, environmental sensors, and utility metering systems into AWS IoT SiteWise and the shared data lake 

• Configure AWS IoT SiteWise asset models that mirror the physical facility hierarchy (site ? building ? system ? component ? measurement) 

• Architect and maintain the shared data lake schema on S3 + Lake Formation + Glue Catalog; coordinate schema changes across the joint team 

• Configure Amazon Timestream for hot time-series storage with appropriate retention tiers (memory store and magnetic store) 

• Implement data quality frameworks: completeness checks, anomaly detection, cadence validation, alerting via CloudWatch and SNS 

• Build and document AWS IoT Greengrass v2 component integrations with source systems via BACnet (IP and MS/TP), Modbus (TCP and RTU), OPC-UA, SNMP, REST APIs, and MQTT (with mTLS authentication via X.509 device certificates) 

• Optimize query performance and partitioning strategies for time-series facility data in Timestream and Athena (over S3) 

• Support the Simulation Engineer's data feed requirements and HVAC automation event logging for the VBAS POC 

• Operate the production data lake at fleet scale, monitor pipeline health, manage schema governance 

• Produce data flow diagrams, schema documentation, and data dictionary for handoff and post-handoff operations 
  
  TSG is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. #LI-BF1