AWS Cloud Platform SME

DNA AI TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

DNA AI TECHNOLOGIES PTE. LTD. seeks an experienced IT infrastructure leader to design, build, and operate a scalable AWS platform.

You will own the enterprise landing zone, multi-account governance, and centralized identity, while enabling platform teams with automation and standardized catalogs. You will manage network, security, and compliance across MAS TRM, PDPA, and ISO 27001, and drive cost governance and resilience initiatives.

Qualifications

• 12–15 years in IT infrastructure with at least 8 years hands-on AWS platform experience.
• Expert knowledge of AWS Control Tower, Organizations, SCPs, and multi-account architecture.
• Deep expertise in AWS networking (Transit Gateway, Direct Connect, Route 53 Resolver, PrivateLink).
• Strong experience with AWS Systems Manager, EC2 Image Builder, AWS Backup, and centralized logging.
• Proficiency in Terraform or CloudFormation for platform automation.
• Scripting skills in Python or Bash.

Responsibilities

• Design, build, and manage enterprise AWS landing zone using Control Tower, Organizations, and SCPs.
• Oversee multi-account architecture including account vending and lifecycle management.
• Manage centralized identity and access using IAM Identity Center and federation.
• Design hub-and-spoke network architecture with Transit Gateway and PrivateLink.
• Oversee platform governance, security services, and compliance (MAS TRM, PDPA, ISO 27001).
• Build and maintain a standardized service catalog and onboarding patterns.
• Drive platform resilience, cost governance, and change monitoring.

Skills

Cloud infrastructure design

AWS platform architecture

Security governance

Platform automation

Python/Bash scripting

Tools

Terraform

CloudFormation

AWS Control Tower

AWS Organizations

VPC/Transit Gateway

Job description

Key Responsibilities

Landing Zone and Account Management

• Design, build, and manage the enterprise AWS landing zone using AWS Control Tower, AWS Organizations, and Service Control Policies.
• Own account vending, organizational unit structure, and account lifecycle management (Account Factory / AFT).
• Manage centralized identity and access using AWS IAM Identity Center, federation with Azure AD/Okta, and permission set governance.

Platform Networking

• Design and manage hub-and-spoke network architecture using Transit Gateway, VPC, Direct Connect, Site-to-Site VPN, and PrivateLink.
• Manage hybrid DNS with Route 53 Resolver, IP address management (VPC IPAM), and network segmentation.
• Oversee centralized ingress/egress, AWS Network Firewall, WAF, and Shield.

Shared Services and Platform Operations

• Manage shared platform services including logging, monitoring, backup, patching, and directory services.
• Oversee AMI lifecycle and golden image pipelines using EC2 Image Builder.
• Manage patching, inventory, and automation with AWS Systems Manager (Patch Manager, State Manager, Session Manager).
• Implement centralized backup and retention policies using AWS Backup.
• Manage platform capacity, service quotas, and limits across accounts.

Platform Governance, Security, and Compliance

• Define and enforce platform guardrails using SCPs, AWS Config conformance packs, and Control Tower controls.
• Manage centralized security services: GuardDuty, Security Hub, CloudTrail (organization trail), Inspector, Macie, and IAM Access Analyzer.
• Manage encryption and key governance with AWS KMS.
• Ensure compliance with MAS TRM, PDPA, ISO 27001, and CIS AWS Foundations Benchmark.

Platform Services Catalog and Enablement

• Build and maintain a standardized service catalog using AWS Service Catalog or Terraform modules.
• Define platform standards, reference architectures, and onboarding patterns for application teams.
• Act as the technical authority and escalation point for AWS platform issues.

Platform Resilience and Cost Governance

• Design multi-region resilience and DR patterns for platform services.
• Oversee platform-level cost governance using Cost Explorer, AWS Budgets, Compute Optimizer, Savings Plans, and tagging policies.
• Track AWS service updates and evaluate their impact on the platform.

Technical Skills Required

• 12-15 years in IT infrastructure, with at least 8 years of hands-on AWS platform experience.
• Expert knowledge of AWS Control Tower, Organizations, SCPs, and multi-account architecture.
• Deep expertise in AWS networking (Transit Gateway, Direct Connect, Route 53 Resolver, PrivateLink).
• Strong experience with AWS Systems Manager, EC2 Image Builder, AWS Backup, and centralized logging.
• Strong knowledge of AWS security and governance services.
• Proficiency in Terraform or CloudFormation for platform automation.
• Scripting skills in Python or Bash.

Good to Have

• AWS Certified Solutions Architect - Professional, Advanced Networking - Specialty, or Security - Specialty.
• HashiCorp Terraform Associate certification.
• Experience in government environments in Singapore.