Senior AWS Platform Architect - Landing Zone & Networking

DNA AI TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

DNA AI TECHNOLOGIES PTE. LTD. seeks an experienced IT infrastructure leader to design, build, and operate a scalable AWS platform.

You will own the enterprise landing zone, multi-account governance, and centralized identity, while enabling platform teams with automation and standardized catalogs. You will manage network, security, and compliance across MAS TRM, PDPA, and ISO 27001, and drive cost governance and resilience initiatives.

Qualifications

• 12–15 years in IT infrastructure with at least 8 years hands-on AWS platform experience.
• Expert knowledge of AWS Control Tower, Organizations, SCPs, and multi-account architecture.
• Deep expertise in AWS networking (Transit Gateway, Direct Connect, Route 53 Resolver, PrivateLink).
• Strong experience with AWS Systems Manager, EC2 Image Builder, AWS Backup, and centralized logging.
• Proficiency in Terraform or CloudFormation for platform automation.
• Scripting skills in Python or Bash.

Responsibilities

• Design, build, and manage enterprise AWS landing zone using Control Tower, Organizations, and SCPs.
• Oversee multi-account architecture including account vending and lifecycle management.
• Manage centralized identity and access using IAM Identity Center and federation.
• Design hub-and-spoke network architecture with Transit Gateway and PrivateLink.
• Oversee platform governance, security services, and compliance (MAS TRM, PDPA, ISO 27001).
• Build and maintain a standardized service catalog and onboarding patterns.
• Drive platform resilience, cost governance, and change monitoring.

Skills

Cloud infrastructure design

AWS platform architecture

Security governance

Platform automation

Python/Bash scripting

Tools

Terraform

CloudFormation

AWS Control Tower

AWS Organizations

VPC/Transit Gateway

Job description

DNA AI TECHNOLOGIES PTE. LTD. seeks an experienced IT infrastructure leader to design, build, and operate a scalable AWS platform.

You will own the enterprise landing zone, multi-account governance, and centralized identity, while enabling platform teams with automation and standardized catalogs. You will manage network, security, and compliance across MAS TRM, PDPA, and ISO 27001, and drive cost governance and resilience initiatives.