- Design, implement, and manage core AWS foundation services including VPC, IAM, KMS, S3, CloudWatch, Config, GuardDuty, and Security Hub.

- Build and maintain landing zones, guardrails, and governance frameworks using AWS Control Tower and AWS Organizations.

- Define and enforce IAM guardrails, including RBAC, SSO, and integration with enterprise Identity Providers.

- Architect and implement advanced networking and security controls such as VPC Peering, Transit Gateway, PrivateLink, WAF, and Service Mesh.

- Develop and maintain lightweight Python and AWS Lambda scripts to automate foundational tasks (e.g., account setup, tagging compliance, security checks).

- Establish and manage Infrastructure as Code (IaC) standards using Terraform and CloudFormation.

- Implement and monitor cost optimization, governance, and FinOps practices across multi-account AWS environments.

- Drive monitoring and observability using CloudWatch, Config, Prometheus, and Grafana.

- Collaborate with Security, DevOps, and Application teams to ensure secure, reliable, and auditable cloud architectures.

Required Skills & Experience :

- Strong hands-on experience with AWS Control Tower, Organizations, IAM Identity Center, AWS Config, CloudTrail, and Security Hub.

- Solid understanding of AWS networking, IAM, and security best practices.

- Experience with Terraform and CloudFormation for multi-account IaC management.

- Basic to intermediate Python skills, including use of boto3 for automation and AWS Lambda scripting.

- Familiarity with CI/CD pipelines and DevOps practices.

- AWS Certified Solutions Architect Professional or Devops Engineer preferred.

- Excellent communication, documentation, and troubleshooting skills.