AWS Platform Architect
About the role
About the Role
AWS Platform Architect
AWS Control Tower and Landing Zone environments
AWS architecture expertise with hands-on platform engineering capabilities
, particularly across AWS Organizations, Control Tower, networking, security, Infrastructure as Code and automation.
What You'll Do
- Architect, implement and manage AWS Control Tower and Landing Zone
solutions for secure, scalable, multi-account AWS environments.
- Design AWS multi-account operating models using
AWS Organizations, Organizational Units (OUs), account structures and centralized governance
.
- Define and implement governance controls including
Service Control Policies (SCPs), Resource Control Policies (RCPs), Declarative Policies and AWS guardrails
.
- Establish enterprise cloud standards across security, networking, identity, monitoring, compliance and operational practices.
- Design and support AWS networking solutions including
VPCs, Transit Gateway, routing, Security Groups, NACLs and cross-account connectivity
.
- Develop reusable infrastructure and automation using
Terraform, CloudFormation, Ansible, Python, JavaScript
or similar technologies.
- Build and integrate cloud deployment pipelines using tools such as
GitHub Actions, Jenkins, Azure DevOps and AWS CodePipeline
.
- Design and support AWS platform services including
IAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch and Systems Manager
.
- Implement appropriate logging, monitoring, observability and alerting using platforms such as
CloudWatch, Grafana, Prometheus, Datadog, Splunk and AWS X-Ray
.
- Identify opportunities to improve cloud performance, reliability, resource utilization and cost efficiency.
- Troubleshoot complex issues involving AWS Control Tower, Landing Zones, networking, IAM, governance and multi-account environments.
- Partner closely with
Platform Engineering, Security, DevOps, Networking and Application teams
to translate business and technical requirements into scalable cloud solutions.
- Create and maintain architecture documentation, standards, configurations and operational processes.
What We're Looking For Must-Have Experience
- 12+ years of overall IT experience
, with at least
5+ years of hands-on AWS Cloud / Platform Engineering / DevOps / SRE / Cloud Architecture experience
.
- Strong hands-on experience designing and implementing
AWS Control Tower and enterprise Landing Zones
.
- Deep understanding of
AWS Organizations, OUs, multi-account architecture, account governance and enterprise AWS operating models
.
- Experience designing and implementing
SCPs, guardrails and AWS governance/security controls
.
- Strong knowledge of
AWS networking
, including VPCs, routing, Security Groups, NACLs and Transit Gateway.
- Strong experience with
Infrastructure as Code
, preferably Terraform, CloudFormation, Ansible or equivalent.
- Good understanding of AWS security,
IAM, identity and access management, security best practices and compliance controls
.
- Experience with CI/CD and cloud automation using tools such as
GitHub Actions, Jenkins, Azure DevOps or AWS CodePipeline
.
- Experience developing automation using
Python and/or JavaScript
.
- Strong platform-level
architecture, implementation, troubleshooting and problem-solving capabilities
.
- Ability to collaborate effectively with engineering, security, infrastructure, networking and application teams.
Good to Have
- Experience implementing Resource Control Policies (RCPs) and Declarative Policies
in complex AWS environments.
- Experience building reusable
Terraform modules/frameworks
for AWS platform provisioning and governance.
- Experience with
account vending/provisioning and cross-account architecture
.
- Exposure to container platforms such as
EKS, ECS and Fargate
.
- Experience implementing enterprise monitoring and observability using
CloudWatch, Grafana, Prometheus, Datadog, Splunk or X-Ray
.
- Experience driving cloud optimization, operational excellence and cost-efficiency initiatives.
Education & Certifications
- B.E./B.Tech, BCA, MCA or equivalent qualification.
- AWS certifications such as
AWS Certified Solutions Architect
AWS Certified SysOps Administrator
AWS Certified DevOps Engineer – Professional
What Will Make You Successful in This Role
actually designed or built the foundational AWS platform on which enterprise workloads operate
Not included in the source posting: benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.