Aws Cloud Architect

CitiusTech Inc; Pune District, Chennai District; Hybrid; INR 4,200,000 - 7,200,000; Full time

Job summary

CitiusTech Inc in Pune invites an experienced AWS Solutions Architect to design secure, scalable cloud infrastructure. You will lead multi-account landing zones, VPCs, EKS/ECS, and serverless patterns while embedding strong security controls and cost awareness.

The role requires 12+ years of hands-on AWS experience, deep networking skills, and proficiency in IAM, KMS, and backup strategies. You will implement IaC, GitOps, and enterprise observability to deliver resilient cloud solutions.

Qualifications

• 12+ years of hands-on AWS experience with Solutions Architect Professional or equivalent certification.

Responsibilities

• Multi-account landing zones, VPC design, EKS/ECS, serverless, data platforms, and security controls.
• Define Enterprise Application Integration (EAI) Architecture with enterprise systems using AWS EventBridge, SNS, SQS, Step Functions
• IaC (Terraform/CloudFormation), GitOps, and platform observability (CloudWatch/Prometheus/Grafana/LGTM stack/Datadog/Splunk).
• Cost optimization (Savings Plans/RI, right-sizing), resiliency (multi-AZ/DR patterns).
• Design and govern DR provisioning strategies RTO/RPO definition, failover automation, and backup/restore validation.
• Load balancer architecture — ALB, NLB, and Kubernetes Ingress design for internal and external traffic.
• Define architecture standards, review designs, and mentor engineering teams.
• Engage with stakeholders to translate business requirements into scalable cloud solutions.

Skills

AWS

Networking

IAM

KMS

WAF

Security

Kafka

Kubernetes

IaC

Terraform

CloudFormation

GitOps

CI/CD

Tools

Terraform

CloudFormation

GitHub Actions

AWS CodePipeline/CodeBuild

CloudWatch

Prometheus

Grafana

Datadog

Splunk

LGTM stack

Job description

JD: Role Summary

Design secure, reliable, and cost-efficient AWS infrastructure, Cloud Migration Strategy, FinOps Governance and architectures with automated, observable DevOps pipelines.

Key Responsibilities

• Multi-account landing zones, VPC design, EKS/ECS, serverless, data platforms, and security controls.
• Define Enterprise Application Integration (EAI) Architecture with enterprise systems such as TeamWorks, Gurobi Optimizer, CRM, ITSM, H2 / Heisenberg II using AWS EventBridge, SNS, SQS, Step Functions
• IaC (Terraform/CloudFormation), GitOps, and platform observability (CloudWatch/Prometheus/Grafana/LGTM stack/Datadog/Splunk).
• Cost optimization (Savings Plans/RI, right-sizing), resiliency (multi-AZ/DR patterns).
• Design and govern DR provisioning strategies RTO/RPO definition, failover automation, and backup/restore validation.
• Load balancer architecture — ALB, NLB, and Kubernetes Ingress design for internal and external traffic.
• Define architecture standards, review designs, and mentor engineering teams.
• Engage with stakeholders to translate business requirements into scalable cloud solutions.

Mandatory

• 12+ years of hands-on AWS experience with Solutions Architect Professional or equivalent certification.
• Deep expertise in AWS networking — VPC, Transit Gateway, PrivateLink, Route 53, ALB, and NLB.
• Strong proficiency in IAM, KMS, WAF, Shield, and Secrets Manager.
• Hands-on experience with S3 (lifecycle policies, replication, versioning), RDS (Multi-AZ, read replicas, snapshots), and backup/restore design.
• Kafka (MSK or self-managed) for event streaming architectures — topic design, partitioning, and consumer group management.
• DR provisioning design — active/passive, active/active, and pilot light patterns with automated failover.
• Kubernetes architecture on EKS — cluster design, RBAC, networking (CNI, Ingress controllers), and storage.
• Strong IaC skills — Terraform and/or CloudFormation at enterprise scale.
• Experience designing multi-account environments using AWS Control Tower / Organizations.
• Proven CI/CD pipeline design (GitHub Actions, AWS CodePipeline/CodeBuild).

Good to Have

• Observability expertise — CloudWatch (metrics, logs, alarms, dashboards) and LGTM stack (Loki, Grafana, Tempo, Mimir).
• Familiarity with FinOps practices and tooling (AWS Cost Explorer, Compute Optimizer, Spot).
• Exposure to service mesh architectures (App Mesh, Istio).
• Knowledge of compliance frameworks — SOC2, ISO 27001, HIPAA, PCI-DSS.
• Hands-on experience with GitOps tooling (ArgoCD, Flux).
• Experience with AWS data platforms (Redshift, Glue, Lake Formation), Data Lake Architecture, Data Governance, Lakehouse Patterns.

Optional

• AWS DevOps Engineer Professional certification.
• Experience with multi-cloud or hybrid cloud patterns.
• Scripting/automation skills in Python or Go.
• Prior experience in financial services, healthcare, or regulated industries.