AWS Platform Architect

Overview

Design and build secure, scalable and highly governed enterprise cloud environments on AWS, architecting Control Tower and Landing Zone solutions, defining multi-account governance standards, and building automation that lets engineering teams operate securely and efficiently at scale.

What you'll do

• Architect, implement and manage AWS Control Tower and Landing Zone solutions for secure, scalable, multi-account AWS environments.
• Design AWS multi-account operating models using AWS Organizations, Organizational Units (OUs), account structures and centralized governance.
• Define and implement governance controls including Service Control Policies (SCPs), Resource Control Policies (RCPs), Declarative Policies and AWS guardrails.
• Establish enterprise cloud standards across security, networking, identity, monitoring, compliance and operational practices.
• Design and support AWS networking solutions including VPCs, Transit Gateway, routing, Security Groups, NACLs and cross-account connectivity.
• Develop reusable infrastructure and automation using Terraform, CloudFormation, Ansible, Python, JavaScript or similar technologies.
• Build and integrate cloud deployment pipelines using tools such as GitHub Actions, Jenkins, Azure DevOps and AWS CodePipeline.
• Design and support AWS platform services including IAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch and Systems Manager.
• Implement appropriate logging, monitoring, observability and alerting using platforms such as CloudWatch, Grafana, Prometheus, Datadog, Splunk and AWS X-Ray.
• Identify opportunities to improve cloud performance, reliability, resource utilization and cost efficiency.
• Troubleshoot complex issues involving AWS Control Tower, Landing Zones, networking, IAM, governance and multi-account environments.
• Partner closely with Platform Engineering, Security, DevOps, Networking and Application teams to translate business and technical requirements into scalable cloud solutions.
• Create and maintain architecture documentation, standards, configurations and operational processes.

What you'll need

• 12+ years of overall IT experience, with at least 5+ years of hands-on AWS Cloud / Platform Engineering / DevOps / SRE / Cloud Architecture experience.
• Strong hands-on experience designing and implementing AWS Control Tower and enterprise Landing Zones.
• Deep understanding of AWS Organizations, OUs, multi-account architecture, account governance and enterprise AWS operating models.
• Experience designing and implementing SCPs, guardrails and AWS governance/security controls.
• Strong knowledge of AWS networking, including VPCs, routing, Security Groups, NACLs and Transit Gateway.
• Strong experience with Infrastructure as Code, preferably Terraform, CloudFormation, Ansible or equivalent.
• Good understanding of AWS security, IAM, identity and access management, security best practices and compliance controls.
• Experience with CI/CD and cloud automation using tools such as GitHub Actions, Jenkins, Azure DevOps or AWS CodePipeline.
• Experience developing automation using Python and/or JavaScript.
• Strong platform-level architecture, implementation, troubleshooting and problem-solving capabilities.
• Ability to collaborate effectively with engineering, security, infrastructure, networking and application teams.
• B.E./B.Tech, BCA, MCA or equivalent qualification.

Nice to have

• Experience implementing Resource Control Policies (RCPs) and Declarative Policies in complex AWS environments.
• Experience building reusable Terraform modules/frameworks for AWS platform provisioning and governance.
• Experience with account vending/provisioning and cross-account architecture.
• Exposure to container platforms such as EKS, ECS and Fargate.
• Experience implementing enterprise monitoring and observability using CloudWatch, Grafana, Prometheus, Datadog, Splunk or X-Ray.
• Experience driving cloud optimization, operational excellence and cost-efficiency initiatives.
• AWS Certified Solutions Architect and/or AWS Certified SysOps Administrator certifications.
• AWS Certified DevOps Engineer – Professional certification.

Details

• Location: Bengaluru.