Senior AWS Platform Architect: Landing Zone & Networking SME

DNA Infotech Pte. Ltd.; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

DNA INFOTECH PTE. LTD. in Singapore seeks an experienced AWS Platform Architect to design, build, and govern enterprise-grade landing zones and multi-account structures.

You will own account lifecycle, identity governance, and secure network design, leveraging AWS Control Tower, Organizations, and SCPs. The role covers platform operations, security/compliance, shared services, and automation with Terraform/CloudFormation to deliver resilient, scalable cloud services for government-grade

Qualifications

• 12–15 years in IT infrastructure.
• 8+ years hands-on AWS platform experience.
• Expert knowledge of AWS Control Tower, Organizations, SCPs, and multi-account architecture.

Responsibilities

• Design, build, and manage the enterprise AWS landing zone using AWS Control Tower, AWS Organizations, and SCPs.
• Own account vending, organizational unit structure, and account lifecycle management.
• Manage centralized identity and access using IAM Identity Center, federation with Azure AD/Okta, and permission governance.
• Design and manage hub-and-spoke network architecture with Transit Gateway, VPC, Direct Connect, VPN, and PrivateLink.
• Oversee logging, monitoring, backup, patching, and directory services.
• Implement encryption and key governance with AWS KMS and ensure MAS TRM, PDPA, ISO 27001, CIS AWS benchmarks compliance.
• Build standardized service catalogs and onboarding patterns; act as technical authority for platform issues.
• Drive platform resilience and cost governance using Cost Explorer, Budgets, and Savings Plans.
• Maintain platform security services including GuardDuty, Security Hub, CloudTrail, Inspector, and IAM Access Analyzer.

Skills

AWS Control Tower

AWS Organizations

SCPs

Multi-account architecture

Terraform

CloudFormation

Python

Bash

Network design

Tools

Terraform

CloudFormation

Job description

DNA INFOTECH PTE. LTD. in Singapore seeks an experienced AWS Platform Architect to design, build, and govern enterprise-grade landing zones and multi-account structures.

You will own account lifecycle, identity governance, and secure network design, leveraging AWS Control Tower, Organizations, and SCPs. The role covers platform operations, security/compliance, shared services, and automation with Terraform/CloudFormation to deliver resilient, scalable cloud services for government-grade