AWS Cloud Platform SME

DNA INFOTECH PTE. LTD.; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

DNA INFOTECH PTE. LTD. in Singapore seeks an experienced AWS Platform Architect to design, build, and govern enterprise-grade landing zones and multi-account structures.

You will own account lifecycle, identity governance, and secure network design, leveraging AWS Control Tower, Organizations, and SCPs. The role covers platform operations, security/compliance, shared services, and automation with Terraform/CloudFormation to deliver resilient, scalable cloud services for government-grade

Qualifications

• 12–15 years in IT infrastructure.
• 8+ years hands-on AWS platform experience.
• Expert knowledge of AWS Control Tower, Organizations, SCPs, and multi-account architecture.

Responsibilities

• Design, build, and manage the enterprise AWS landing zone using AWS Control Tower, AWS Organizations, and SCPs.
• Own account vending, organizational unit structure, and account lifecycle management.
• Manage centralized identity and access using IAM Identity Center, federation with Azure AD/Okta, and permission governance.
• Design and manage hub-and-spoke network architecture with Transit Gateway, VPC, Direct Connect, VPN, and PrivateLink.
• Oversee logging, monitoring, backup, patching, and directory services.
• Implement encryption and key governance with AWS KMS and ensure MAS TRM, PDPA, ISO 27001, CIS AWS benchmarks compliance.
• Build standardized service catalogs and onboarding patterns; act as technical authority for platform issues.
• Drive platform resilience and cost governance using Cost Explorer, Budgets, and Savings Plans.
• Maintain platform security services including GuardDuty, Security Hub, CloudTrail, Inspector, and IAM Access Analyzer.

Skills

AWS Control Tower

AWS Organizations

SCPs

Multi-account architecture

Terraform

CloudFormation

Python

Bash

Network design

Tools

Terraform

CloudFormation

Job description

Key Responsibilities

Landing Zone and Account Management

• Design, build, and manage the enterprise AWS landing zone using AWS Control Tower, AWS Organizations, and Service Control Policies.


• Own account vending, organizational unit structure, and account lifecycle management (Account Factory / AFT).


• Manage centralized identity and access using AWS IAM Identity Center, federation with Azure AD/Okta, and permission set governance.

Platform Networking

• Design and manage hub-and-spoke network architecture using Transit Gateway, VPC, Direct Connect, Site-to-Site VPN, and PrivateLink.


• Manage hybrid DNS with Route 53 Resolver, IP address management (VPC IPAM), and network segmentation.


• Oversee centralized ingress/egress, AWS Network Firewall, WAF, and Shield.

Shared Services and Platform Operations

• Manage shared platform services including logging, monitoring, backup, patching, and directory services.


• Oversee AMI lifecycle and golden image pipelines using EC2 Image Builder.


• Manage patching, inventory, and automation with AWS Systems Manager (Patch Manager, State Manager, Session Manager).


• Implement centralized backup and retention policies using AWS Backup.


• Manage platform capacity, service quotas, and limits across accounts.

Platform Governance, Security, and Compliance

• Define and enforce platform guardrails using SCPs, AWS Config conformance packs, and Control Tower controls.


• Manage centralized security services: GuardDuty, Security Hub, CloudTrail (organization trail), Inspector, Macie, and IAM Access Analyzer.


• Manage encryption and key governance with AWS KMS.


• Ensure compliance with MAS TRM, PDPA, ISO 27001, and CIS AWS Foundations Benchmark.

Platform Services Catalog and Enablement

• Build and maintain a standardized service catalog using AWS Service Catalog or Terraform modules.


• Define platform standards, reference architectures, and onboarding patterns for application teams.


• Act as the technical authority and escalation point for AWS platform issues.

Platform Resilience and Cost Governance

• Design multi-region resilience and DR patterns for platform services.


• Oversee platform-level cost governance using Cost Explorer, AWS Budgets, Compute Optimizer, Savings Plans, and tagging policies.


• Track AWS service updates and evaluate their impact on the platform.

Technical Skills Required

• 12–15 years in IT infrastructure, with at least 8 years of hands‑on AWS platform experience.


• Expert knowledge of AWS Control Tower, Organizations, SCPs, and multi‑account architecture.


• Deep expertise in AWS networking (Transit Gateway, Direct Connect, Route 53 Resolver, PrivateLink).


• Strong experience with AWS Systems Manager, EC2 Image Builder, AWS Backup, and centralized logging.


• Strong knowledge of AWS security and governance services.


• Proficiency in Terraform or CloudFormation for platform automation.


• Scripting skills in Python or Bash.

Good to Have

• AWS Certified Solutions Architect – Professional, Advanced Networking – Specialty, or Security – Specialty.


• HashiCorp Terraform Associate certification.

Experience in government environments in Singapore.