AWS Platform Architect

It's fun to work in a company where people truly BELIEVE in what they are doing!

• We're committed to bringing passion and customer focus to the business.*

• *About the Role**
• -----------------

Fractal is looking for an experienced **AWS Platform Architect** to design and build secure, scalable and highly governed enterprise cloud environments on AWS. In this role, You will be responsible for architecting **AWS Control Tower and Landing Zone environments**, defining multi\-account governance standards and building automation that enables engineering teams to operate securely and efficiently at scale.

We are looking for someone who combines strong **AWS architecture expertise with hands\-on platform engineering capabilities**, particularly across AWS Organizations, Control Tower, networking, security, Infrastructure as Code and automation.

• *What You'll Do**
• -----------------

• Architect, implement and manage **AWS Control Tower and Landing Zone** solutions for secure, scalable, multi\-account AWS environments.
• Design AWS multi\-account operating models using **AWS Organizations, Organizational Units (OUs), account structures and centralized governance**.
• Define and implement governance controls including **Service Control Policies (SCPs), Resource Control Policies (RCPs), Declarative Policies and AWS guardrails**.
• Establish enterprise cloud standards across security, networking, identity, monitoring, compliance and operational practices.
• Design and support AWS networking solutions including **VPCs, Transit Gateway, routing, Security Groups, NACLs and cross\-account connectivity**.
• Develop reusable infrastructure and automation using **Terraform, CloudFormation, Ansible, Python, JavaScript** or similar technologies.
• Build and integrate cloud deployment pipelines using tools such as **GitHub Actions, Jenkins, Azure DevOps and AWS CodePipeline**.
• Design and support AWS platform services including **IAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch and Systems Manager**.
• Implement appropriate logging, monitoring, observability and alerting using platforms such as **CloudWatch, Grafana, Prometheus, Datadog, Splunk and AWS X\-Ray**.
• Identify opportunities to improve cloud performance, reliability, resource utilization and cost efficiency.
• Troubleshoot complex issues involving AWS Control Tower, Landing Zones, networking, IAM, governance and multi\-account environments.
• Partner closely with **Platform Engineering, Security, DevOps, Networking and Application teams** to translate business and technical requirements into scalable cloud solutions.
• Create and maintain architecture documentation, standards, configurations and operational processes.

• *What We're Looking For**
• -------------------------

### **Must\-Have Experience**

• **12\+ years of overall IT experience**, with at least **5\+ years of hands\-on AWS Cloud / Platform Engineering / DevOps / SRE / Cloud Architecture experience**.
• Strong hands\-on experience designing and implementing **AWS Control Tower and enterprise Landing Zones**.
• Deep understanding of **AWS Organizations, OUs, multi\-account architecture, account governance and enterprise AWS operating models**.
• Experience designing and implementing **SCPs, guardrails and AWS governance/security controls**.
• Strong knowledge of **AWS networking**, including VPCs, routing, Security Groups, NACLs and Transit Gateway.
• Strong experience with **Infrastructure as Code**, preferably Terraform, CloudFormation, Ansible or equivalent.
• Good understanding of AWS security, **IAM, identity and access management, security best practices and compliance controls**.
• Experience with CI/CD and cloud automation using tools such as **GitHub Actions, Jenkins, Azure DevOps or AWS CodePipeline**.
• Experience developing automation using **Python and/or JavaScript**.
• Strong platform\-level **architecture, implementation, troubleshooting and problem\-solving capabilities**.
• Ability to collaborate effectively with engineering, security, infrastructure, networking and application teams.

• *Good to Have**
• ---------------

• Experience implementing **Resource Control Policies (RCPs) and Declarative Policies** in complex AWS environments.
• Experience building reusable **Terraform modules/frameworks** for AWS platform provisioning and governance.
• Experience with **account vending/provisioning and cross\-account architecture**.
• Exposure to container platforms such as **EKS, ECS and Fargate**.
• Experience implementing enterprise monitoring and observability using **CloudWatch, Grafana, Prometheus, Datadog, Splunk or X\-Ray**.
• Experience driving cloud optimization, operational excellence and cost\-efficiency initiatives.

• *Education \& Certifications**
• ------------------------------

• B.E./B.Tech, BCA, MCA or equivalent qualification.
• AWS certifications such as **AWS Certified Solutions Architect** and/or **AWS Certified SysOps Administrator** are preferred.
• **AWS Certified DevOps Engineer – Professional** is an added advantage.

• *What Will Make You Successful in This Role**
• ---------------------------------------------

You will thrive in this role if you have gone beyond just deploying workloads on AWS and have **actually designed or built the foundational AWS platform on which enterprise workloads operate**.

We are particularly interested in professionals who have worked hands\-on with: **AWS Control Tower \| Landing Zones \| AWS Organizations \| Multi\-Account Architecture \| SCPs \| AWS Governance \| IAM \| VPC \| Transit Gateway \| Terraform \| CloudFormation \| CI/CD \| Python \| AWS Security**

If you like wild growth and working with happy, enthusiastic over\-achievers, you'll enjoy your career with us!

Not the right fit? Let us know you're interested in a future opportunity by clicking *Introduce Yourself* in the top\-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!