AWS Platform Architect

It's fun to work in a company where people truly BELIEVE in what they are doing!

We're committed to bringing passion and customer focus to the business.

About the Role

Fractal is looking for an experiencedAWS Platform Architect to design and build secure, scalable and highly governed enterprise cloud environments on AWS. In this role, You will be responsible for architectingAWS Control Tower and Landing Zone environments, defining multi-account governance standards and building automation that enables engineering teams to operate securely and efficiently at scale.

We are looking for someone who combines strongAWS architecture expertise with hands-on platform engineering capabilities, particularly across AWS Organizations, Control Tower, networking, security, Infrastructure as Code and automation.

What You'll Do

• Architect, implement and manageAWS Control Tower and Landing Zone solutions for secure, scalable, multi-account AWS environments.
• Design AWS multi-account operating models usingAWS Organizations, Organizational Units (OUs), account structures and centralized governance.
• Define and implement governance controls includingService Control Policies (SCPs), Resource Control Policies (RCPs), Declarative Policies and AWS guardrails.
• Establish enterprise cloud standards across security, networking, identity, monitoring, compliance and operational practices.
• Design and support AWS networking solutions includingVPCs, Transit Gateway, routing, Security Groups, NACLs and cross-account connectivity.
• Develop reusable infrastructure and automation usingTerraform, CloudFormation, Ansible, Python, JavaScript or similar technologies.
• Build and integrate cloud deployment pipelines using tools such asGitHub Actions, Jenkins, Azure DevOps and AWS CodePipeline.
• Design and support AWS platform services includingIAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch and Systems Manager.
• Implement appropriate logging, monitoring, observability and alerting using platforms such asCloudWatch, Grafana, Prometheus, Datadog, Splunk and AWS X-Ray.
• Identify opportunities to improve cloud performance, reliability, resource utilization and cost efficiency.
• Troubleshoot complex issues involving AWS Control Tower, Landing Zones, networking, IAM, governance and multi-account environments.
• Partner closely withPlatform Engineering, Security, DevOps, Networking and Application teams to translate business and technical requirements into scalable cloud solutions.
• Create and maintain architecture documentation, standards, configurations and operational processes.

What We're Looking For

Must-Have Experience

• 12+ years of overall IT experience, with at least5+ years of hands-on AWS Cloud / Platform Engineering / DevOps / SRE / Cloud Architecture experience.
• Strong hands-on experience designing and implementingAWS Control Tower and enterprise Landing Zones.
• Deep understanding ofAWS Organizations, OUs, multi-account architecture, account governance and enterprise AWS operating models.
• Experience designing and implementingSCPs, guardrails and AWS governance/security controls.
• Strong knowledge ofAWS networking, including VPCs, routing, Security Groups, NACLs and Transit Gateway.
• Strong experience withInfrastructure as Code, preferably Terraform, CloudFormation, Ansible or equivalent.
• Good understanding of AWS security,IAM, identity and access management, security best practices and compliance controls.
• Experience with CI/CD and cloud automation using tools such asGitHub Actions, Jenkins, Azure DevOps or AWS CodePipeline.
• Experience developing automation usingPython and/or JavaScript.
• Strong platform-levelarchitecture, implementation, troubleshooting and problem-solving capabilities.
• Ability to collaborate effectively with engineering, security, infrastructure, networking and application teams.

Good to Have

• Experience implementingResource Control Policies (RCPs) and Declarative Policies in complex AWS environments.
• Experience building reusableTerraform modules/frameworks for AWS platform provisioning and governance.
• Experience withaccount vending/provisioning and cross-account architecture.
• Exposure to container platforms such asEKS, ECS and Fargate.
• Experience implementing enterprise monitoring and observability usingCloudWatch, Grafana, Prometheus, Datadog, Splunk or X-Ray.
• Experience driving cloud optimization, operational excellence and cost-efficiency initiatives.

Education & Certifications

• B.E./B.Tech, BCA, MCA or equivalent qualification.
• AWS certifications such asAWS Certified Solutions Architect and/orAWS Certified SysOps Administrator are preferred.
• AWS Certified DevOps Engineer – Professional is an added advantage.

What Will Make You Successful in This Role

You will thrive in this role if you have gone beyond just deploying workloads on AWS and haveactually designed or built the foundational AWS platform on which enterprise workloads operate.

We are particularly interested in professionals who have worked hands-on with:AWS Control Tower | Landing Zones | AWS Organizations | Multi-Account Architecture | SCPs | AWS Governance | IAM | VPC | Transit Gateway | Terraform | CloudFormation | CI/CD | Python | AWS Security

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Not the right fit?  Let us know you're interested in a future opportunity by clicking Introduce Yourself in the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!