Company Description Krutakam is a technology-focused organization specializing in modern cloud and AI solutions. The company is committed to delivering scalable, secure, and high-performing platforms that support complex business needs across industries. Krutakam values technical excellence, collaborative problem-solving, and continuous learning in multi-cloud environments.

Team members work on challenging projects that involve advanced cloud-native technologies and integration patterns. The organization fosters a culture of innovation and practical, results-oriented delivery for its clients.

Notice Period: Immediate Joiners Preferred (Immediate Deployment Required).

Location: Bengaluru, India

Experience: 10+ Years

Role: Cloud Architecture | Platform Engineering | DevSecOps

We are looking for an experienced Multi-Cloud Platform Architect with deep expertise in AWS and Azure to design, govern, and implement secure, scalable, and cost-optimized enterprise cloud platforms.

The ideal candidate will have solid hands-on experience in cloud landing zones, enterprise architecture, identity and access management, networking, security governance, Infrastructure as Code (IaC), and cloud platform engineering.

Key Responsibilities

1. Enterprise Cloud Landing Zone Architecture

- Design and govern AWS and Azure landing zones aligned with AWS Well-Architected Framework and Microsoft Cloud Adoption Framework.
- Implement AWS Organizations, Control Tower, Landing Zone Accelerator, Organizational Units (OUs), SCPs, RCPs, and Account Factory.
- Design Azure Management Groups, Subscriptions, Azure Policies, and Dev/Test/Prod environment segregation.
- Define enterprise-scale cloud topology, governance standards, and migration strategies, including AWS Migration Acceleration Program (MAP).

2. Identity & Access Management

- Architect AWS IAM, IAM Identity Center (SSO), IAM Roles, Trust Policies, Permission Sets, Permission Boundaries, and cross-account access.
- Implement SAML/OIDC federation, AWS STS, IAM Access Analyzer, EKS IRSA and Pod Identity.
- Design Azure identity architecture using Microsoft Entra ID, Managed Identities, Privileged Identity Management (PIM), and RBAC/ABAC.
- Establish least-privilege access and workload identity patterns.

3. Cloud Networking & Connectivity

- Design secure AWS VPC architectures, subnets, route tables, Transit Gateway, VPC Peering, PrivateLink, and VPC Endpoints.




- Implement Route 53, DNS Resolver, NAT/Internet Gateways, Network Firewall, Security Groups, and NACLs.
- Architect hybrid connectivity using AWS Direct Connect, Site-to-Site VPN, Azure ExpressRoute, and VPN Gateway.
- Design Azure VNet, Virtual WAN, Private Endpoints, and hub-and-spoke networking architectures.
- Implement secure application connectivity and Zero Trust principles.

4. Cloud Security & Governance

- Implement AWS Config, Security Hub, GuardDuty, Inspector, Macie, CloudTrail, and Audit Manager.
- Establish encryption and secrets management using AWS KMS, CloudHSM, Secrets Manager, and Parameter Store.
- Implement WAF, Shield, and Certificate Manager.
- Establish Azure governance and security using Azure Policy and Microsoft Defender for Cloud.
- Ensure compliance, auditability, risk management, and enterprise security standards.

5. Infrastructure as Code & Automation

- Develop and maintain reusable Terraform modules using AWS and Azure providers.
- Implement infrastructure automation using Terraform, AWS CloudFormation, and AWS CDK.
- Build reusable modules for networking, identity, security, compute, storage, and shared services.
- Automate infrastructure provisioning and delivery using AWS CodePipeline, CodeBuild, and GitHub Actions.

6. Compute, Containers & Application Platforms

- Architect AWS compute platforms using EC2, Auto Scaling, EKS, ECS, Fargate, and Lambda.
- Design event-driven and serverless architectures using Step Functions, EventBridge, SQS, and SNS.
- Implement container image management using Amazon ECR.
- Define workload placement, scalability, and resource right-sizing strategies.

7. Data, Storage, Backup & Disaster Recovery

- Design AWS storage and data architectures using S3, EBS, EFS, FSx, RDS, Aurora, DynamoDB, Redshift, and Glue.
- Establish encryption, lifecycle management, replication, versioning, and data protection standards.
- Define Multi-AZ and Multi-Region architectures, backup strategies, and disaster recovery solutions.




- Implement AWS Backup, Elastic Disaster Recovery, and Route 53 failover with defined RTO/RPO objectives.

8. Observability, Reliability & FinOps

- Implement cloud monitoring using CloudWatch, CloudTrail, X-Ray, Prometheus, and Grafana.
- Establish Azure Monitor, Log Analytics, and Application Insights integrations.
- Apply SRE principles, automated alerting, and operational excellence practices.
- Drive cloud cost optimization using AWS Cost Explorer, Budgets, Cost and Usage Reports, Compute Optimizer, Savings Plans, and Reserved Instances.
- Establish tagging standards, cost allocation, and FinOps governance.

9. Architecture & Technical Leadership

- Collaborate with security, compliance, infrastructure, and application engineering teams.
- Develop reference architectures, reusable blueprints, and cloud platform accelerators.
- Conduct architecture reviews, design validations, and technical assessments.
- Guide engineering teams and partners in implementing production-ready AWS, Azure, and hybrid cloud solutions.

Required Skills & Expertise
- Strong experience in AWS and Microsoft Azure cloud architecture.
- Expertise in AWS Control Tower, Organizations, Landing Zone Accelerator, and Azure Landing Zones.
- Hands-on experience with Terraform and Infrastructure as Code.
- Strong knowledge of AWS IAM, Microsoft Entra ID, and cloud identity architecture.
- Expertise in AWS VPC, Transit Gateway, PrivateLink, Azure VNet, and hybrid networking.
- Experience with cloud security, governance, compliance, and enterprise-scale architectures.
- Knowledge of Kubernetes (EKS/AKS), containers, serverless, and cloud-native services.
- Experience with CI/CD automation, monitoring, observability, and FinOps.

Preferred Certifications
- AWS Solutions Architect – Professional
- AWS Security Specialty
- AWS Advanced Networking Specialty
- Microsoft Certified: Azure Solutions Architect Expert
- HashiCorp Certified: Terraform Associate

Interested?

If you have a passion for designing enterprise-scale multi-cloud platforms and building secure, automated, and resilient cloud foundations, we'd love to hear from you.

? Apply through LinkedIn or share your profile with us.

- #Hiring #AWS #Azure #CloudArchitect #MultiCloud #LandingZone #Terraform #CloudSecurity #PlatformEngineering #DevOps #CloudInfrastructure #FinOps

📌 Senior Multi-Cloud Platform Architect – AWS & Azure (Bengaluru)
🏢 Krutakam
📍 Bengaluru