AWS Cloud Platform SME

Job Title: AWS Cloud Platform SME

Location: Singapore

Experience: 12 to 15 Years

Employment Type: Full-time

Job Description

We are looking for an experienced AWS Cloud Platform SME to design, build, secure, and manage enterprise AWS cloud platforms. The ideal candidate should have strong hands-on experience in AWS landing zones, multi account architecture, cloud networking, security governance, platform automation, and disaster recovery.

Key Responsibilities

AWS Landing Zone and Account Management

• Design and manage AWS landing zones using AWS Control Tower, AWS Organizations, and Service Control Policies (SCPs).

• Manage account provisioning, organizational units, and account lifecycle using Account Factory and AFT.

• Implement centralized identity and access management using AWS IAM Identity Center and Azure AD or Okta.

AWS Networking

• Design and manage hub and spoke network architecture using VPC, Transit Gateway, Direct Connect, Site to Site VPN, and PrivateLink.

• Manage hybrid DNS using Route 53 Resolver, VPC IPAM, and network segmentation.

• Implement centralized network security using AWS Network Firewall, WAF, and Shield.

Platform Operations

• Manage shared services, centralized logging, monitoring, backup, patching, and directory services.

• Build golden AMIs and image pipelines using EC2 Image Builder.

• Automate patching, inventory, and server management using AWS Systems Manager.

• Implement AWS Backup policies and manage service quotas and platform capacity.

Security and Governance

• Implement cloud guardrails using SCPs, AWS Config, and Control Tower controls.

• Manage GuardDuty, Security Hub, CloudTrail, Inspector, Macie, IAM Access Analyzer, and AWS KMS.

• Ensure compliance with MAS TRM, PDPA, ISO 27001, and CIS AWS Foundations Benchmark.

Automation and Platform Engineering

• Develop standardized service catalogs using AWS Service Catalog or Terraform modules.

• Define platform standards, reference architectures, and application onboarding processes.

• Automate infrastructure provisioning using Terraform or CloudFormation.

• Use Python or Bash scripting for automation.

• Act as the technical authority and escalation point for AWS platform issues.

Resilience and Cost Optimization

• Design multi region resilience and disaster recovery solutions.

• Manage cloud costs using AWS Cost Explorer, AWS Budgets, Compute Optimizer, Savings Plans, and tagging policies.

• Evaluate new AWS services and recommend platform improvements.

Required Skills

• 12 to 15 years of overall IT infrastructure experience.

• Minimum 8 years of hands on AWS platform experience.

• Expert knowledge of AWS Control Tower, AWS Organizations, SCPs, and multi account architecture.

• Strong expertise in AWS networking, including Transit Gateway, Direct Connect, Route 53 Resolver, VPC, and PrivateLink.

• Experience with AWS Systems Manager, EC2 Image Builder, AWS Backup, and centralized logging.

• Strong knowledge of AWS security, identity management, governance, and compliance.

• Proficiency in Terraform or CloudFormation.

• Scripting experience in Python or Bash.

• Strong troubleshooting and technical leadership skills.

Preferred Qualifications

• AWS Certified Solutions Architect Professional, Advanced Networking Specialty, or Security Specialty.

• HashiCorp Terraform Associate certification.

• Experience in Singapore government or public sector environments.