AWS Cloud Platform Architect

Fractal Analytics Private Limited; Bengaluru; Hybrid; INR 4,000,000 - 6,500,000; Full time

Job summary

Fractal Analytics Private Limited is seeking an experienced AWS Platform Architect to design secure, scalable enterprise cloud environments on AWS. You will architect Control Tower and Landing Zone environments, define governance, and build automation to enable engineering teams to operate securely at scale.

Responsibilities include implementing multi-account models with AWS Organizations, SCPs, and guardrails, plus developing reusable IaC modules and deployment pipelines.

Qualifications

• 12+ years in IT with at least 5+ years hands-on AWS Cloud/Platform Engineering/DevOps/SRE/Cloud Architecture experience
• Strong hands-on experience designing/implementing AWS Control Tower and enterprise Landing Zones
• Deep understanding of AWS Organizations, OUs, multi-account governance, and enterprise operating models
• Experience with SCPs, guardrails and governance/security controls in AWS
• Solid knowledge of AWS networking (VPCs, Transit Gateway, routing, SGs, NACLs)
• Proficient in Infrastructure as Code (Terraform/CloudFormation/Ansible)
• Experience with CI/CD and cloud automation (GitHub Actions/Jenkins/Azure DevOps/AWS CodePipeline)
• Proficiency in Python and/or JavaScript for automation
• Ability to collaborate with Platform Eng, Security, DevOps, Networking and App teams
• Experience building reusable Terraform modules/frameworks for provisioning and governance
• Exposure to container platforms (EKS/ECS/Fargate) and enterprise monitoring (CloudWatch/Grafana/Datadog)

Responsibilities

• Architect and implement AWS Control Tower and Landing Zone solutions for secure, scalable multi-account environments
• Design multi-account operating models using AWS Organizations, OUs and centralized governance
• Define and implement governance controls (SCPs, RCPs, Declarative Policies, guardrails)
• Establish enterprise cloud standards across security, networking, identity, monitoring and compliance
• Design/support AWS networking (VPCs, Transit Gateway, routing, SGs, NACLs, cross-account connectivity)
• Develop reusable infrastructure and automation using Terraform, CloudFormation, Ansible, Python, JavaScript
• Build/integrate cloud deployment pipelines (GitHub Actions, Jenkins, Azure DevOps, AWS CodePipeline)
• Design/support AWS platform services (IAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch, Systems Manager)
• Implement logging, monitoring and observability (CloudWatch, Grafana, Prometheus, Datadog, Splunk, X-Ray)
• Identify opportunities to improve performance, reliability, cost efficiency
• Troubleshoot complex issues in Control Tower, Landing Zones, networking, governance
• Collaborate with Platform Eng, Security, DevOps, Networking and App teams to translate requirements
• Create and maintain architecture documentation, standards, configurations and processes

Skills

AWS Architecture

Multi-Account Governance

Terraform

CloudFormation

CI/CD

Networking

IAM & Security

Python

Education

B.E./B.Tech / BCA / MCA

AWS Certifications

Tools

Terraform

CloudFormation

Job description

AWS Platform Architect It's fun to work in a company where people truly BELIEVE in what they are doing! We're committed to bringing passion and customer focus to the business.

About the Role

Fractal is looking for an experienced AWS Platform Architect to design and build secure, scalable and highly governed enterprise cloud environments on AWS. In this role, You will be responsible for architecting AWS Control Tower and Landing Zone environments , defining multi-account governance standards and building automation that enables engineering teams to operate securely and efficiently at scale. We are looking for someone who combines strong AWS architecture expertise with hands-on platform engineering capabilities , particularly across AWS Organizations, Control Tower, networking, security, Infrastructure as Code and automation.

What You'll Do

• Architect, implement and manage AWS Control Tower and Landing Zone solutions for secure, scalable, multi-account AWS environments.
• Design AWS multi-account operating models using AWS Organizations, Organizational Units (OUs), account structures and centralized governance .
• Define and implement governance controls including Service Control Policies (SCPs), Resource Control Policies (RCPs), Declarative Policies and AWS guardrails .
• Establish enterprise cloud standards across security, networking, identity, monitoring, compliance and operational practices.
• Design and support AWS networking solutions including VPCs, Transit Gateway, routing, Security Groups, NACLs and cross-account connectivity .
• Develop reusable infrastructure and automation using Terraform, CloudFormation, Ansible, Python, JavaScript or similar technologies.
• Build and integrate cloud deployment pipelines using tools such as GitHub Actions, Jenkins, Azure DevOps and AWS CodePipeline .
• Design and support AWS platform services including IAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch and Systems Manager .
• Implement appropriate logging, monitoring, observability and alerting using platforms such as CloudWatch, Grafana, Prometheus, Datadog, Splunk and AWS X-Ray .
• Identify opportunities to improve cloud performance, reliability, resource utilization and cost efficiency.
• Troubleshoot complex issues involving AWS Control Tower, Landing Zones, networking, IAM, governance and multi-account environments.
• Partner closely with Platform Engineering, Security, DevOps, Networking and Application teams to translate business and technical requirements into scalable cloud solutions.
• Create and maintain architecture documentation, standards, configurations and operational processes.

What We're Looking For

• Must-Have Experience 12+ years of overall IT experience , with at least 5+ years of hands-on AWS Cloud / Platform Engineering / DevOps / SRE / Cloud Architecture experience .
• Strong hands-on experience designing and implementing AWS Control Tower and enterprise Landing Zones .
• Deep understanding of AWS Organizations, OUs, multi-account architecture, account governance and enterprise AWS operating models .
• Experience designing and implementing SCPs, guardrails and AWS governance/security controls .
• Strong knowledge of AWS networking , including VPCs, routing, Security Groups, NACLs and Transit Gateway.
• Strong experience with Infrastructure as Code , preferable Terraform, CloudFormation, Ansible or equivalent.
• Good understanding of AWS security, IAM, identity and access management, security best practices and compliance controls .
• Experience with CI/CD and cloud automation using tools such as GitHub Actions, Jenkins, Azure DevOps or AWS CodePipeline .
• Experience developing automation using Python and/or JavaScript.
• Strong platform-level architecture, implementation, troubleshooting and problem-solving capabilities .
• Ability to collaborate effectively with engineering, security, infrastructure, networking and application teams.
• Good to Have Experience implementing Resource Control Policies (RCPs) and Declarative Policies in complex AWS environments.
• Experience building reusable Terraform modules/frameworks for AWS platform provisioning and governance.
• Experience with account vending/provisioning and cross-account architecture .
• Exposure to container platforms such as EKS, ECS and Fargate .
• Experience implementing enterprise monitoring and observability using CloudWatch, Grafana, Prometheus, Datadog, Splunk or X-Ray .
• Experience driving cloud optimization, operational excellence and cost-efficiency initiatives.

Education & Certifications

B.E./B.Tech, BCA, MCA or equivalent qualification. AWS certifications such as AWS Certified Solutions Architect and/or AWS Certified SysOps Administrator are preferred. AWS Certified DevOps Engineer - Professional is an added advantage.

What Will Make You Successful in This Role

You will thrive in this role if you have gone beyond just deploying workloads on AWS and have actually designed or built the foundational AWS platform on which enterprise workloads operate . We are particularly interested in professionals who have worked hands-on with: AWS Control Tower | Landing Zones | AWS Organizations | Multi-Account Architecture | SCPs | AWS Governance | IAM | VPC | Transit Gateway | Terraform | CloudFormation | CI/CD | Python | AWS Security.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Experience Level Senior Level