Cloud Architect - AWS Landing Zone & Self-Service Platform

EPAM Systems Inc; Colombia; Remote; COP 120,000,000 - 180,000,000; Full time

Benefits offered by this job

Healthcare benefits

International projects

Upskilling and certifications

Job summary

EPAM Systems Inc. seeks a Cloud Architect to own the enterprise AWS landing zone, reference architectures and a self-service platform that balances developer velocity with security, cost awareness and resilience.

You will align security, networking, FinOps and application teams to deliver scalable cloud solutions. The role requires hands-on design authority across multi-account environments, governance automation, and a focus on Well-Architected practices while driving a cohesive modernization

Qualifications

• Experience owning multi-account AWS landing zones with Organizations, Control Tower, OU design and centralized logging.
• Hands-on governance with SCPs, IAM Identity Center, tagging strategy, and break-glass patterns.
• Background in authoring enterprise reference architectures and serving as cross-team design authority.

Responsibilities

• Own the AWS landing zone and reference architectures, ensuring secure, compliant and cost-aware infra.
• Maintain SCPs, Config rules, conformance packs and centralized logging.
• Centralize identity via IAM Identity Center with permission sets, federation and ABAC.
• Enforce tagging taxonomy and tag policies for cost, ownership, automation, and reporting.
• Run account factory/self-service provisioning with enforced tags and approvals.
• Publish Well-Architected reference architectures and lead Well-Architected Reviews.
• Design VPC segmentation, Transit Gateway/Cloud WAN, hybrid links, and NGFW with Gateway Load Balancer inspection.
• Define workload landing patterns across IaaS, managed services, and serverless.

Skills

Multi-account AWS landing zones

Terraform IaC

GitOps workflows

Networking (VPC segmentation)

Control Tower / Organizations

Security & IAM (SSO, ABAC)

Well-Architected reviews

Tools

Terraform Modules

Terraform Registry

GitOps tools (Atlantis)

CI/CD pipelines

Policy as Code (OPA, Sentinel)

Job description

EPAM Systems Inc. seeks a Cloud Architect to own the enterprise AWS landing zone, reference architectures and a self-service platform that balances developer velocity with security, cost awareness and resilience.

You will align security, networking, FinOps and application teams to deliver scalable cloud solutions. The role requires hands-on design authority across multi-account environments, governance automation, and a focus on Well-Architected practices while driving a cohesive modernization