Job Description

We are seeking a Cloud Architect to join the CCoE and own the enterprise AWS landing zone, reference architectures, and self-service platform that deliver secure, compliant, cost-aware infrastructure, acting as the hands-on design authority who aligns security, networking, FinOps, and application teams to balance developer velocity with resilience and financial accountability.

Responsibilities

Own the AWS Organizations/Control Tower landing zone, including OU hierarchy, baselines, and centralized logging
Maintain SCPs, Config rules, and conformance packs with controlled break-glass access
Centralize identity via IAM Identity Center with permission sets, federation, and ABAC
Enforce a tagging taxonomy and tag policies for cost, ownership, automation, and reporting
Run account factory/self-service provisioning with enforced tags and approvals
Manage change, detect drift, and remediate at scale
Publish