Position Responsibilities: 

• Design, build, and manage a secure, foundational AWS environment using tools like AWS Control Tower and AWS Organizations to support organizational requirements for networking, identity management, governance, security, and cost optimization
• Design & Implementation: Architect and deploy a secure, scalable AWS Landing Zone using best practices, including AWS Organizations, Control Tower, Identity and Access Management (IAM), VPCs, and Transit Gateways.
• Security & Compliance: Implement security configurations like Service Control Policies (SCPs), centralized logging (e.g., CloudTrail, AWS Config), and data encryption to meet compliance requirements and provide security guardrails.
•  Networking: Design and implement secure network architecture, including VPCs, subnets, Transit Gateways, and connectivity patterns for secure communication and resource isolation.
• Identity & Access Management (IAM): Develop and manage IAM strategies, including user roles, permission sets, and integration with Identity Center to control access to resources securely.
• Automation & Governance: Create Infrastructure as Code (IaC) modules using tools like Terraform to automate landing zone deployment and establish governance frameworks for resource usage and cost management.
• Collaboration & Support: Work with stakeholders to understand their needs, provide technical guidance and workshops, and mentor other technical teams using the landing zone
• Develop and manage CI/CD pipelines using tools like Github and implement Infrastructure-as-Code (IaC) for automated deployments and configurations
• Design and deploy Platform Engineering tooling, services and automation for automated workload onboarding or accelerating application migration
•  Develop GitOps solutions
• Ensure cloud environments adhere to corporate security guidelines and industry regulations by implementing security measures and access controls. 
• Deploy and manage cloud-based applications, ensuring they are configured to leverage cloud features and are running efficiently. 
• Monitor system performance, identify and resolve infrastructure and application-related issues, and optimize resource allocation. 
• Manage day to day operation of cloud infrastructure, cost, governance and security
• Work closely with development and other engineering teams to provide solutions, support cloud adoption, and align cloud solutions with business requirements.

Basic Qualifications (Required skills/experience):

• AWS Organizations: Manages multi-account structures, enabling a secure, scaled multi-account strategy.
• AWS Control Tower: Automates the setup of a secure multi-account AWS environment based on AWS best practices.
• IAM (Identity and Access Management): Manages user identities, roles, and permissions to control access to resources.
• VPC (Virtual Private Cloud): Provides isolated virtual networks for securely deploying resources.
• Transit Gateway: Connects VPCs, on-premises networks, and other AWS services into a unified network.
•  IaC (Infrastructure as Code): Uses tools like Terraform for automated, consistent deployment of landing zone components.
• AWS Well-Architected Framework: A set of design principles for building secure, high-performing, reliable, and cost-effective systems on AWS. 
• Experience with DevOps and CI/CD tools (AWS CodeCommit/Build/Pipeline, GitLab, or similar)
• Strong scripting skills in Python, Bash or other high-level languages
• Security Best Practices: Strong understanding of cloud security principles and best practices. 
•  Problem-Solving: Excellent analytical and troubleshooting skills to address complex technical challenges. 
•  Communication: Ability to effectively communicate technical concepts to various stakeholders.