Job Description: Sr. AWS/ Cloud Architect (Lead) - Multi-Tenant AWS Platform
Company Overview:Object Edge is embarking on an exciting project to build a cutting-edge, multi-tenant SaaS platform on AWS. We are looking for a seasoned Cloud Architect to lead the design and implementation of this complex and scalable environment. Join us to drive innovation and build a robust foundation for our next generation of services.Job Summary:The Cloud Architect (Lead) will be the primary technical authority for designing and overseeing the implementation of our multi-tenant AWS architecture.
This role is critical for establishing a secure, scalable, and cost-efficient cloud foundation. You will be responsible for making key architectural decisions, defining the multi-account strategy, ensuring adherence to best practices, and guiding the team through the initial rapid setup and subsequent enhancements of the platform.
Key Responsibilities:
- Architectural Design & Strategy:
- Design and document the end-to-end AWS architecture for a multi-tenant SaaS platform, ensuring high availability, scalability, security, and performance.
- Define and implement the multi-account strategy using AWS Organizations and AWS Control Tower, including OU structures, SCPs, and account vending processes.
- Lead the selection and integration of appropriate AWS services to meet business and technical requirements.
- Develop and enforce cloud governance policies, standards, and best practices across the platform.
- Oversee the design and implementation of robust networking solutions, including VPCs, subnets, routing, and connectivity between accounts and services.
- Ensure security best practices are embedded into the architecture from the ground up, including identity and access management, data protection, network security, and threat detection.
- Drive cost-optimization strategies by selecting appropriate service tiers, implementing resource tagging, and establishing monitoring for cloud spend.
- Technical Leadership & Execution:
- Provide technical leadership and guidance to the DevOps and development teams throughout the project lifecycle.
- Oversee the initial rapid setup of AWS Organizations/Control Tower, core networking (VPCs), and essential IAM policies.
- Guide the development of automated tenant account provisioning scripts, ensuring integration with AWS Control Tower Account Factory.
- Collaborate with DevOps engineers on Infrastructure as Code (IaC) strategy and implementation using Terraform.
- Ensure the architecture supports efficient CI/CD pipelines for both shared services and tenant-specific deployments.
- Make critical architectural decisions quickly to maintain project momentum, especially during the initial 3-month intensive build phase.
- Collaboration & Communication:
- Work closely with product managers, engineering leads, and security specialists to translate requirements into robust and scalable cloud solutions.
- Clearly communicate architectural decisions, technical designs, and project status to stakeholders at all levels.
- Mentor team members on AWS best practices and architectural patterns.
Required Skills and Experience:
- Proven experience (typically 8+ years) as a Cloud Architect, with a strong focus on AWS.
- Deep Expertise in AWS Services:
- Core Infrastructure & Networking: VPC, Route 53, CloudFront, ALB, API Gateway, Direct Connect, Transit Gateway.
- Compute & Containers: EC2, ECS Fargate, EKS, Lambda.
- Storage: S3, EBS, Glacier.
- Databases: RDS (PostgreSQL), Aurora, DynamoDB.
- Security & Identity: IAM, Cognito, AWS WAF & Shield, GuardDuty, Inspector, Security Hub, KMS, Secrets Manager, Parameter Store, AWS SSO.
- Management & Governance: AWS Organizations, AWS Control Tower, CloudFormation, Systems Manager, CloudWatch, CloudTrail.
- Application Integration & Messaging: EventBridge, SQS, SNS, Step Functions.
- Developer Tools: Experience with or understanding of CodeCommit, CodeArtifact, CodeBuild, CodeDeploy, CodePipeline.
- Cost Management: AWS Cost Explorer, AWS Budgets.
- Backup & Recovery: AWS Backup, AWS Backup Vault Lock.
- Multi-Tenant Architecture: Demonstrable experience designing and implementing multi-tenant solutions on AWS, including strategies for data isolation, tenant provisioning, and lifecycle management.
- Infrastructure as Code (IaC): Strong proficiency with Terraform for provisioning and managing AWS resources.
- Networking: In-depth understanding of cloud networking principles, including VPC design, subnets, NACLs, security groups, VPNs, and load balancing.
- Security: Comprehensive knowledge of cloud security best practices, compliance frameworks, and security services.
- CI/CD: Familiarity with CI/CD principles and tools (e.g., Jenkins, GitHub Actions).
- Leadership: Proven ability to lead technical teams, make critical decisions, and drive projects to completion.
- Excellent problem-solving, analytical, and communication skills.
- Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent practical experience).
Preferred Qualifications:
- AWS Certified Solutions Architect - Professional.
- Experience with AWS Generative AI services (e.g., Amazon Bedrock, SageMaker).
- Experience with scripting languages (e.g., Python, Bash).
- Familiarity with Agile development methodologies.
Project-Specific AWS Services Focus (Initial 3-6 Months):CloudFront, VPC, Route53, Cognito, ALB, API Gateway, ECS Fargate, PostgreSQL (RDS), S3, EventBridge, DynamoDB, AWS Generative AI services, Terraform, Github, Github Actions, Jenkins, RDS, AWS Organizations, AWS Control Tower, IAM, CloudWatch, AWS Backup.