AWS Platform Architect

Fractal; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Fractal is seeking an experienced AWS Platform Architect to design and build secure, scalable enterprise cloud environments on AWS from Bengaluru. You will architect Control Tower and Landing Zone environments, define governance standards and build automation for engineering teams to operate securely at scale.

You will lead multi-account models, implement SCPs and guardrails, and develop reusable Terraform and CloudFormation modules while collaborating with Platform Eng., Security, DevOps and

Qualifications

• Advanced hands-on AWS architecture experience with Control Tower and Landing Zones.
• Strong knowledge of AWS Organizations, multi-account governance and SCPs.
• Experience with IaC and automation tooling (Terraform, CloudFormation, Ansible).
• Security, networking, IAM, monitoring and cost-optimization awareness.
• CI/CD and cloud automation using GitHub Actions, Jenkins or AWS CodePipeline.

Responsibilities

• Architect and manage AWS Control Tower and Landing Zone environments.
• Design multi-account operating models using AWS Organizations and OUs.
• Define governance controls like SCPs, guardrails and RCPs.
• Establish enterprise cloud standards for security, networking and monitoring.
• Develop reusable infrastructure modules and automation.
• Collaborate with Platform Eng., Security, DevOps, Networking and Apps teams.

Skills

AWS Platform

DevOps

Terraform

CloudFormation

Automation

Networking

Education

BE/B.Tech

BCA

MCA

Tools

Terraform

CloudFormation

Ansible

GitHub Actions

Jenkins

AWS CodePipeline

Job description

It's fun to work in a company where people truly BELIEVE in what they are doing! We're committed to bringing passion and customer focus to the business.

About the Role

Fractal is looking for an experienced AWS Platform Architect to design and build secure, scalable and highly governed enterprise cloud environments on AWS. In this role, You will be responsible for architecting AWS Control Tower and Landing Zone environments, defining multi-account governance standards and building automation that enables engineering teams to operate securely and efficiently at scale. We are looking for someone who combines strong AWS architecture expertise with hands‑on platform engineering capabilities, particularly across AWS Organizations, Control Tower, networking, security, Infrastructure as Code and automation.

What You'll Do

• Architect, implement and manage AWS Control Tower and Landing Zone solutions for secure, scalable, multi‑account AWS environments.
• Design AWS multi‑account operating models using AWS Organizations, Organizational Units (OUs), account structures and centralized governance.
• Define and implement governance controls including Service Control Policies (SCPs), Resource Control Policies (RCPs), Declarative Policies and AWS guardrails.
• Establish enterprise cloud standards across security, networking, identity, monitoring, compliance and operational practices.
• Design and support AWS networking solutions including VPCs, Transit Gateway, routing, Security Groups, NACLs and cross‑account connectivity.
• Develop reusable infrastructure and automation using Terraform, CloudFormation, Ansible, Python, JavaScript or similar technologies.
• Build and integrate cloud deployment pipelines using tools such as GitHub Actions, Jenkins, Azure DevOps and AWS CodePipeline.
• Design and support AWS platform services including IAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch and Systems Manager.
• Implement appropriate logging, monitoring, observability and alerting using platforms such as CloudWatch, Grafana, Prometheus, Datadog, Splunk and AWS X‑Ray.
• Identify opportunities to improve cloud performance, reliability, resource utilization and cost efficiency.
• Troubleshoot complex issues involving AWS Control Tower, Landing Zones, networking, IAM, governance and multi‑account environments.
• Partner closely with Platform Engineering, Security, DevOps, Networking and Application teams to translate business and technical requirements into scalable cloud solutions.
• Create and maintain architecture documentation, standards, configurations and operational processes.

What We're Looking For

• Must-Have Experience 12+ years of overall IT experience, with at least 5+ years of hands‑on AWS Cloud / Platform Engineering / DevOps / SRE / Cloud Architecture experience.
• Strong hands‑on experience designing and implementing AWS Control Tower and enterprise Landing Zones.
• Deep understanding of AWS Organizations, OUs, multi‑account architecture, account governance and enterprise AWS operating models.
• Experience designing and implementing SCPs, guardrails and AWS governance/security controls.
• Strong knowledge of AWS networking, including VPCs, routing, Security Groups, NACLs and Transit Gateway.
• Strong experience with Infrastructure as Code, preferably Terraform, CloudFormation, Ansible or equivalent.
• Good understanding of AWS security, IAM, identity and access management, security best practices and compliance controls.
• Experience with CI/CD and cloud automation using tools such as GitHub Actions, Jenkins, Azure DevOps or AWS CodePipeline.
• Experience developing automation using Python and/or JavaScript.
• Strong platform‑level architecture, implementation, troubleshooting and problem‑solving capabilities.
• Ability to collaborate effectively with engineering, security, infrastructure, networking and application teams.
• Good to Have Experience implementing Resource Control Policies (RCPs) and Declarative Policies in complex AWS environments.
• Experience building reusable Terraform modules/frameworks for AWS platform provisioning and governance.
• Experience with account vending/provisioning and cross‑account architecture.
• Exposure to container platforms such as EKS, ECS and Fargate.
• Experience implementing enterprise monitoring and observability using CloudWatch, Grafana, Prometheus, Datadog, Splunk or X‑Ray.
• Experience driving cloud optimization, operational excellence and cost‑efficiency initiatives.

Education & Certifications

B.E./B.Tech, BCA, MCA or equivalent qualification.

AWS certifications such as AWS Certified Solutions Architect and/or AWS Certified SysOps Administrator are preferred. AWS Certified DevOps Engineer – Professional is an added advantage.

What Will Make You Successful in This Role

• You will thrive in this role if you have gone beyond just deploying workloads on AWS and have actually designed or built the foundational AWS platform on which enterprise workloads operate.
• We are particularly interested in professionals who have worked hands‑on with: AWS Control Tower | Landing Zones | AWS Organizations | Multi‑Account Architecture | SCPs | AWS Governance | IAM | VPC | Transit Gateway | Terraform | CloudFormation | CI/CD | Python | AWS Security.

If you like wild growth and working with happy, enthusiastic over‑achievers, you'll enjoy your career with us!

At Fractal, towards our goal of “powering every human decision in the enterprise”, our partnerships and alliances help in creating and delivering a compelling suite of solutions to unlock value. We partner with companies from around the globe, leaders in their respective fields. With Fractal’s expertise in artificial intelligence, design, engineering, and digital transformation, combined with the data, technology, and software platforms from our partners, we create cutting‑edge solutions to problems in the business world. We understand how critical and timely decision triggers, and information, empower our clients to create, unlock, deliver, and realize value. Together with our partners, our goal is to serve each client in their end‑to‑end data‑to‑decision journey.