AWS Platform Architect

About the Role

Fractal is looking for an experienced AWS Platform Architect to design and build secure, scalable and highly governed enterprise cloud environments on AWS. In this role, You will be responsible for architecting AWS Control Tower and Landing Zone environments, defining multi-account governance standards and building automation that enables engineering teams to operate securely and efficiently at scale.

We are looking for someone who combines strong AWS architecture expertise with hands-on platform engineering capabilities, particularly across AWS Organizations, Control Tower, networking, security, Infrastructure as Code and automation.

What You'll Do

• Architect, implement and manage AWS Control Tower and Landing Zone solutions for secure, scalable, multi-account AWS environments.
• Design AWS multi-account operating models using AWS Organizations, Organizational Units (OUs), account structures and centralized governance.
• Define and implement governance controls including Service Control Policies (SCPs), Resource Control Policies (RCPs), Declarative Policies and AWS guardrails.
• Establish enterprise cloud standards across security, networking, identity, monitoring, compliance and operational practices.
• Design and support AWS networking solutions including VPCs, Transit Gateway, routing, Security Groups, NACLs and cross-account connectivity.
• Develop reusable infrastructure and automation using Terraform, CloudFormation, Ansible, Python, JavaScript or similar technologies.
• Build and integrate cloud deployment pipelines using tools such as GitHub Actions, Jenkins, Azure DevOps and AWS CodePipeline.
• Design and support AWS platform services including IAM, EC2, S3, RDS, EKS, ECS, Fargate, Load Balancers, CloudWatch and Systems Manager.
• Implement appropriate logging, monitoring, observability and alerting using platforms such as CloudWatch, Grafana, Prometheus, Datadog, Splunk and AWS X-Ray.
• Identify opportunities to improve cloud performance, reliability, resource utilization and cost efficiency.
• Troubleshoot complex issues involving AWS Control Tower, Landing Zones, networking, IAM, governance and multi-account environments.
• Partner closely with Platform Engineering, Security, DevOps, Networking and Application teams to translate business and technical requirements into scalable cloud solutions.
• Create and maintain architecture documentation, standards, configurations and operational processes.

What We're Looking For

Must-Have Experience

• 12+ years of overall IT experience, with at least 5+ years of hands-on AWS Cloud / Platform Engineering / DevOps / SRE / Cloud Architecture experience.
• Strong hands-on experience designing and implementing AWS Control Tower and enterprise Landing Zones.
• Deep understanding of AWS Organizations, OUs, multi-account architecture, account governance and enterprise AWS operating models.
• Experience designing and implementing SCPs, guardrails and AWS governance/security controls.
• Strong knowledge of AWS networking, including VPCs, routing, Security Groups, NACLs and Transit Gateway.
• Strong experience with Infrastructure as Code, preferably Terraform, CloudFormation, Ansible or equivalent.
• Good understanding of AWS security, IAM, identity and access management, security best practices and compliance controls.
• Experience with CI/CD and cloud automation using tools such as GitHub Actions, Jenkins, Azure DevOps or AWS CodePipeline.
• Experience developing automation using Python and/or JavaScript.
• Strong platform-level architecture, implementation, troubleshooting and problem-solving capabilities.
• Ability to collaborate effectively with engineering, security, infrastructure, networking and application teams.

Good to Have

• Experience implementing Resource Control Policies (RCPs) and Declarative Policies in complex AWS environments.
• Experience building reusable Terraform modules/frameworks for AWS platform provisioning and governance.
• Experience with account vending/provisioning and cross-account architecture.
• Exposure to container platforms such as EKS, ECS and Fargate.
• Experience implementing enterprise monitoring and observability using CloudWatch, Grafana, Prometheus, Datadog, Splunk or X-Ray.
• Experience driving cloud optimization, operational excellence and cost-efficiency initiatives.

Education & Certifications

• B.E./B.Tech, BCA, MCA or equivalent qualification.
• AWS certifications such as AWS Certified Solutions Architect and/or AWS Certified SysOps Administrator are preferred.
• AWS Certified DevOps Engineer – Professional is an added advantage.

What Will Make You Successful in This Role

You will thrive in this role if you have gone beyond just deploying workloads on AWS and have actually designed or built the foundational AWS platform on which enterprise workloads operate.

We are particularly interested in professionals who have worked hands-on with: AWS Control Tower | Landing Zones | AWS Organizations | Multi-Account Architecture | SCPs | AWS Governance | IAM | VPC | Transit Gateway | Terraform | CloudFormation | CI/CD | Python | AWS Security