Cloud Architect

EPAM Systems Inc; Chile; A distancia; CLP 42.000.000 - 66.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off

Upskilling & certifications

Global project exposure

LinkedIn Learning access

Descripción de la vacante

EPAM Systems Inc. seeks a Cloud Architect to lead the enterprise AWS landing zone, reference architectures, and a self-service platform for secure, cost-conscious infrastructure.

You will align security, networking, FinOps, and application teams to balance developer speed with resilience. Responsibilities include Well-Architected reviews, workload landing patterns, and multi-region strategy, while guiding migration efforts and governance across teams.

Formación

• At least 2 years of experience as a Software Architect.
• Experience managing multi-account AWS landing zones with Organizations, Control Tower, OU/SCP strategy, and centralized logging.
• Strong expertise in networking, including VPC segmentation, Transit Gateway, hybrid connectivity, and centralized firewall inspection.
• Proficiency in Terraform-based IaC, CI/CD pipelines, and GitOps workflows with reusable module design.
• Hands-on governance tools such as SCPs, IAM Identity Center, and tagging strategy.

Responsabilidades

• Own the AWS Organizations/Control Tower landing zone, including OU hierarchy and centralized logging.
• Maintain SCPs, Config rules, and conformance packs; enforce break-glass access.
• Roll out tagging taxonomy and policies for cost tracking and automation.
• Oversee self-service provisioning workflows with tag enforcement and approvals.
• Develop Well-Architected reference architectures and lead review sessions.

Conocimientos

AWS Cloud Architecture

Terraform

GitOps

CI/CD

Networking (VPC, Transit Gateway)

Security & IAM Identity Center

FinOps / cost awareness

Communication / stakeholder alignment

Multi-account governance

Well-Architected framework

Herramientas

Terraform

IAM Identity Center

Control Tower

Atlantis

Descripción del empleo

We're seeking a Cloud Architect to join the CCoE and take the reins on the enterprise AWS landing zone, reference architectures, and self-service platform that power secure, compliant, cost-conscious infrastructure. You'll be the hands-on design authority, bringing security, networking, FinOps, and application teams into alignment to balance developer speed with resilience and financial discipline.ResponsibilitiesTake ownership of the AWS Organizations/Control Tower landing zone, covering OU hierarchy, baselines, and centralized loggingKeep SCPs, Config rules, and conformance packs up to date while controlling break-glass accessBring identity management under one roof using IAM Identity Center with permission sets, federation, and ABACRoll out and enforce a tagging taxonomy and tag policies to support cost tracking, ownership, automation, and reportingOperate account factory/self-service provisioning workflows with built-in tag enforcement and approval stepsOversee change management, catch configuration drift, and remediate issues at scaleCreate and publish AWS Well-Architected reference architectures, and lead Well-Architected Review sessionsArchitect VPC segmentation, Transit Gateway/Cloud WAN, hybrid connectivity, and NGFW setups with Gateway Load Balancer inspectionEstablish workload landing patterns spanning IaaS, managed services, and serverless, clearly outlining the trade-offs of eachDrive 7-R migration efforts and portfolio sequencing, lead design board meetings, and take charge of resilience, DR, and multi-region strategyDevelop a self-service cloud/internal developer platform built on codified guardrailsEstablish Terraform module standards and registry strategy, define GitOps workflows, and manage golden-image and container platform patch/promotion pipelinesRequirementsAt least 2 years of experience working as a Software ArchitectExperience managing multi-account AWS landing zones with Organizations, Control Tower, OU/SCP strategy, and centralized loggingStrong expertise in networking, including VPC segmentation, Transit Gateway/Cloud WAN, hybrid connectivity, and centralized firewall inspectionStrong expertise in Terraform-based IaC, CI/CD pipelines, and GitOps workflows with reusable module designHands-on experience using governance tools such as SCPs, IAM Identity Center, and tagging strategyA background in writing enterprise reference architectures and acting as a cross-team design authorityExcellent communication skills, with the ability to influence both engineers and executivesFamiliarity with AWS Organizations, Control Tower, OU design, SCPs, Config conformance packs, and account factory/vendingFamiliarity with IAM Identity Center (SSO), permission sets, federation, ABAC, role design, and break-glass patternsFamiliarity with VPC design, Transit Gateway, Cloud WAN, Direct Connect/VPN, PrivateLink, Route 53, and NGFW with Gateway Load Balancer inspectionFamiliarity with Terraform modules/registry, GitOps (Atlantis, Terraform Cloud), CI/CD pipelines, and policy-as-code (OPA, Sentinel, SCP)Familiarity with EC2, EKS, ECS, ECR, EC2 Image Builder, SSM Patch Manager, golden AMIs, Lambda, and FargateFamiliarity with CSPM/CNAPP (Wiz, Prisma Cloud), GuardDuty, Security Hub, KMS, CIEM, and secrets managementEnglish proficiency at a B2+ level or higherWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.