Company Description Krutakam is a technology-focused organization specializing in modern cloud and AI solutions. The company is committed to delivering scalable, secure, and high-performing platforms that support complex business needs across industries. Krutakam values technical excellence, cooperative problem-solving, and continuous learning in multi-cloud environments. Team members work on challenging projects that involve advanced cloud-native technologies and integration patterns. The organization fosters a culture of innovation and practical, results-oriented delivery for its clients. Notice Period: Immediate Joiners Preferred (Immediate Deployment Required).

Location:
Bengaluru, India

Experience:
10+ Years Role: Cloud Architecture | Platform Engineering | DevSecOps We are looking for an experienced Multi-Cloud Platform Architect with deep expertise in AWS and Azure to design, govern, and implement secure, scalable, and cost-optimized enterprise cloud platforms. The ideal candidate will have strong hands-on experience in cloud landing zones, enterprise architecture, identity and access management, networking, security governance, Infrastructure as Code (IaC), and cloud platform engineering.

Key Responsibilities
1. Enterprise Cloud Landing Zone Architecture
• Design and govern AWS and Azure landing zones aligned with AWS Well-Architected Framework and Microsoft Cloud Adoption Framework.
• Implement AWS Organizations, Control Tower, Landing Zone Accelerator, Organizational Units (OUs), SCPs, RCPs, and Account Factory.
• Design Azure Management Groups, Subscriptions, Azure Policies, and Dev/Test/Prod environment segregation.
• Define enterprise-scale cloud topology, governance standards, and migration strategies, including AWS Migration Acceleration Program (MAP). 2. Identity & Access Management
• Architect AWS IAM, IAM Identity Center (SSO), IAM Roles, Trust Policies, Permission Sets, Permission Boundaries, and cross-account access.
• Implement SAML/OIDC federation, AWS STS, IAM Access Analyzer, EKS IRSA and Pod Identity.
• Design Azure identity architecture using Microsoft Entra ID, Managed Identities, Privileged Identity Management (PIM), and RBAC/ABAC.
• Establish least-privilege access and workload identity patterns. 3. Cloud Networking & Connectivity
• Design secure AWS VPC architectures, subnets, route tables, Transit Gateway, VPC Peering, PrivateLink, and VPC Endpoints.
• Implement Route 53,



DNS Resolver, NAT/Internet Gateways, Network Firewall, Security Groups, and NACLs.
• Architect hybrid connectivity using AWS Direct Connect, Site-to-Site VPN, Azure ExpressRoute, and VPN Gateway.
• Design Azure VNet, Virtual WAN, Private Endpoints, and hub-and-spoke networking architectures.
• Implement secure application connectivity and Zero Trust principles. 4. Cloud Security & Governance
• Implement AWS Config, Security Hub, GuardDuty, Inspector, Macie, CloudTrail, and Audit Manager.
• Establish encryption and secrets management using AWS KMS, CloudHSM, Secrets Manager, and Parameter Store.
• Implement WAF, Shield, and Certificate Manager.
• Establish Azure governance and security using Azure Policy and Microsoft Defender for Cloud.
• Ensure compliance, auditability, risk management, and enterprise security standards. 5. Infrastructure as Code & Automation
• Develop and maintain reusable Terraform modules using AWS and Azure providers.
• Implement infrastructure automation using Terraform, AWS CloudFormation, and AWS CDK.
• Build reusable modules for networking, identity, security, compute, storage, and shared services.
• Automate infrastructure provisioning and delivery using AWS CodePipeline, CodeBuild, and GitHub Actions. 6. Compute, Containers & Application Platforms
• Architect AWS compute platforms using EC2, Auto Scaling, EKS, ECS, Fargate, and Lambda.
• Design event-driven and serverless architectures using Step Functions, EventBridge, SQS, and SNS.
• Implement container image management using Amazon ECR.
• Define workload placement, scalability, and resource right-sizing strategies. 7. Data, Storage, Backup & Disaster Recovery
• Design AWS storage and data architectures using S3, EBS, EFS, FSx, RDS, Aurora, DynamoDB, Redshift, and Glue.
• Establish encryption, lifecycle management, replication, versioning, and data protection standards.
• Define Multi-AZ and Multi-Region architectures, backup strategies, and disaster recovery solutions.
• Implement AWS Backup,



Elastic Disaster Recovery, and Route 53 failover with defined RTO/RPO objectives. 8. Observability, Reliability & FinOps
• Implement cloud monitoring using CloudWatch, CloudTrail, X-Ray, Prometheus, and Grafana.
• Establish Azure Monitor, Log Analytics, and Application Insights integrations.
• Apply SRE principles, automated alerting, and operational excellence practices.
• Drive cloud cost optimization using AWS Cost Explorer, Budgets, Cost and Usage Reports, Compute Optimizer, Savings Plans, and Reserved Instances.
• Establish tagging standards, cost allocation, and FinOps governance. 9. Architecture & Technical Leadership
• Collaborate with security, compliance, infrastructure, and application engineering teams.
• Develop reference architectures, reusable blueprints, and cloud platform accelerators.
• Conduct architecture reviews, design validations, and technical assessments.
• Guide engineering teams and partners in implementing production-ready AWS, Azure, and hybrid cloud solutions. Required Skills & Expertise
• Strong experience in AWS and Microsoft Azure cloud architecture.
• Expertise in AWS Control Tower, Organizations, Landing Zone Accelerator, and Azure Landing Zones.
• Hands-on experience with Terraform and Infrastructure as Code.
• Strong knowledge of AWS IAM, Microsoft Entra ID, and cloud identity architecture.
• Expertise in AWS VPC, Transit Gateway, PrivateLink, Azure VNet, and hybrid networking.
• Experience with cloud security, governance, compliance, and enterprise-scale architectures.
• Knowledge of Kubernetes (EKS/AKS), containers, serverless, and cloud-native services.
• Experience with CI/CD automation, monitoring, observability, and FinOps. Preferred Certifications
• AWS Solutions Architect – Professional
• AWS Security Specialty
• AWS Advanced Networking Specialty
• Microsoft Certified: Azure Solutions Architect Expert
• HashiCorp Certified: Terraform Associate Interested? If you have a passion for designing enterprise-scale multi-cloud platforms and building secure, automated, and resilient cloud foundations, we'd love to hear from you. ? Apply through LinkedIn or share

your profile
with us.
• #Hiring #AWS #Azure #CloudArchitect #MultiCloud #LandingZone #Terraform #CloudSecurity #PlatformEngineering #DevOps #CloudInfrastructure #FinOps

📌 Senior Multi-Cloud Platform Architect – AWS (Bengaluru)
🏢 Krutakam
📍 Bengaluru