Position Overview :

We are seeking an experienced Principal Cloud Platform Architect / Engineering Lead to lead the design, implementation, and operationalization of a secure, scalable, enterprise-grade AWS cloud platform. This is not a traditional DevOps role. We are looking for a highly skilled cloud engineering leader who combines deep architectural expertise with hands-on implementation experience. You will work closely with Infrastructure, Cybersecurity, Networking, Platform Engineering, and Application Development teams to build a modern cloud platform that supports enterprise-scale workloads with a strong emphasis on security, governance, observability, and operational excellence.

The platform architecture includes :

- Amazon EKS (Multi-Account Architecture)

- AWS Organizations

- Development, UAT, and Production Account Separation

- AWS Transit Gateway (TGW)

- AWS PrivateLink

- Akamai CDN & WAF

- Bitbucket CI/CD

- OpenTelemetry

- SigNoz Observability

- Secure Hybrid Connectivity

- Zero Trust Security Architecture

Key Responsibilities :

- Lead the architecture, design, and implementation of an enterprise-scale AWS Kubernetes platform.

- Design and implement secure multi-account AWS environments using AWS Organizations.

- Establish Kubernetes platform standards, governance, security controls, and operational best practices.

- Design secure networking architectures using Transit Gateway, PrivateLink, VPN, and AWS Direct Connect.

- Build secure and scalable CI/CD pipelines using Bitbucket Pipelines and self-hosted runners.

- Lead migration of containerized and cloud-native workloads into Amazon EKS.

- Develop Infrastructure as Code using Terraform.

- Implement enterprise observability using OpenTelemetry, SigNoz, Prometheus, and Grafana.

- Drive Zero Trust security architecture and least-privilege access controls.

- Collaborate with Cyber Security teams for architecture reviews, security assessments, and compliance initiatives.

- Create technical standards, architecture documentation, implementation roadmaps, and operational playbooks.

- Mentor engineering teams and serve as the technical leader for cloud platform initiatives.

- Ensure platform reliability, scalability, availability, and operational readiness.

Required Technical Skills :

- AWS (Expert): Amazon EKS, AWS Organizations, VPC Architecture, Transit Gateway, AWS PrivateLink, Route 53, IAM & IRSA, Amazon ECR, AWS Lambda, Application Load Balancer (ALB), Network Load Balancer (NLB), AWS CloudTrail, Amazon GuardDuty, AWS Key Management Service (KMS), AWS Secrets Manager.

- Kubernetes (Expert): Production-grade Amazon EKS deployments, Multi-tenant Kubernetes environments, Kubernetes RBAC, Network Policies, Ingress Controllers, Helm, GitOps, Kubernetes Security, Service Mesh (Istio/App Mesh preferred).

- DevOps & Platform Engineering: Bitbucket Pipelines, OIDC-based Authentication, CI/CD Architecture, Docker & Containerization, Infrastructure as Code (Terraform preferred), Platform Automation.

- Security: Zero Trust Architecture, Least Privilege IAM, Kubernetes Security, Cloud Security Architecture, Enterprise Governance & Compliance.

- Observability: OpenTelemetry, SigNoz, Prometheus, Grafana, Centralized Logging, Metrics, Distributed Tracing.

Required Qualifications:

- Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.

- 10+ years of Infrastructure, Platform, or Cloud Engineering experience.

- 5+ years of AWS Architecture experience.

- 5+ years of Kubernetes platform engineering experience.

- Strong hands-on experience designing and implementing enterprise cloud platforms.

- Excellent communication, documentation, and stakeholder management skills.

- Experience collaborating with Infrastructure, Security, Networking, and Application Engineering teams.

- Ability to independently drive architecture, implementation, and operational excellence.

Preferred Certifications:

- AWS Certified Solutions Architect Professional.

- Certified Kubernetes Administrator (CKA).

- Certified Kubernetes Security Specialist (CKS).

Preferred Experience:

- Enterprise-scale cloud modernization initiatives.

- Regulated or security-sensitive environments.

- Hybrid cloud networking and connectivity.

- Large-scale Kubernetes migrations.

- Enterprise observability implementations.

- Platform engineering and cloud governance frameworks.

Work Hours:

- Must be available during US East Coast business hours.