About the Role :

We are hiring a Cloud Architect to design, govern, and continuously optimise the AWS cloud estate from internal development tooling to a portfolio of customer-facing SaaS products acquired from multiple companies.

This is not a single-product infrastructure role. You will define the AWS Landing Zone architecture that governs how every environment - development, QA, non-production, internal IT, and customer-facing SaaS - is structured, secured, and operated.

What you'll do :

- Design and own AWS Landing Zone - multi-account architecture, OU hierarchy, and account vending standards.

- Author and enforce Service Control Policies (SCPs) across all environment tiers.

- Own the end-to-end infrastructure architecture across the full product portfolio.

- Define Infrastructure-as-Code standards (Terraform or AWS CDK).

- Own network, application, and data security across the entire cloud estate.

- Build and own the observability stack on AWS using Prometheus and Grafana.

- Author precise, unambiguous runbooks for operational scenarios.

- Deploy AI agents for APM monitoring, deployment health checks, and anomaly detection.

What we're looking for :

- 12+ years in cloud infrastructure, platform engineering, SRE, or DevOps.

- AWS Solutions Architect Associate certification is a minimum requirement; Professional is strongly preferred.

- Proven experience designing and operating AWS Landing Zones using AWS Organizations.

- Deep, hands-on expertise across core AWS services : EC2, EKS, RDS, Lambda, S3, CloudFront, Route 53, CloudWatch, IAM, VPC, Transit Gateway, AWS Control Tower.

- Strong command of network, application, and data security in a multi-account AWS context.

- Experience building and operating observability stacks using Prometheus, Grafana, or equivalent.

- Practical exposure to agentic AI, LLM-based automation, or AI-assisted infrastructure operations.