AWS CLOUD & PLATFORM LEAD (BFSI Domain)

Position: AWS CLOUD & PLATFORM LEAD (BFSI Domain)

Location: Mumbai

Experience: 6–10 years

About the Role

We are looking for an experienced AWS Cloud & Platform Lead / Cloud Architect to design, build and evolve a secure, scalable, automated and highly available AWS cloud platform for enterprise digital products. The role will own cloud architecture, infrastructure automation, security, reliability, observability, cost optimization and cloud engineering standards.

Key Responsibilities

1. AWS Cloud Foundation

• Design and implement AWS Organizations and multi-account architecture.
• Establish landing zones and account governance using AWS Control Tower or equivalent approaches.
• Define production, non-production, shared services and security/logging environments.
• Design VPC, subnet, routing, Transit Gateway and hybrid connectivity architectures.
• Define IAM, identity federation, least-privilege access and role-based access models.
• Design DNS, load balancing, ingress, private connectivity and network security controls.
• Implement encryption, KMS, secrets and certificate-management standards.
• Establish centralized logging, auditing and security monitoring.

2. Cloud Platform for Digital Products

• Design and implement reusable cloud deployment patterns for backend services, web applications, middleware, event-driven workloads, databases and supporting platform services.
• Evaluate and establish appropriate use of EKS, ECS/Fargate, EC2, Lambda and AWS managed services.
• Design scalable and resilient application architectures aligned with business and non-functional requirements.
• Define reference architectures and reusable platform components.

3. Infrastructure as Code & Automation

• Establish Infrastructure as Code as the standard for provisioning and managing cloud infrastructure.
• Develop reusable Terraform modules and environment-specific configurations.
• Implement secure remote state management, change controls and automated provisioning.
• Establish infrastructure validation, policy checks and drift-detection mechanisms.
• Integrate infrastructure provisioning with CI/CD pipelines

4. CI/CD & Developer Platform

• Design standardized CI/CD pipelines covering build, test, security scanning, packaging and deployment.
• Implement containerization, image management and automated deployments.
• Establish Kubernetes/ECS deployment patterns and Helm-based deployments where applicable.
• Implement environment promotion, approvals, rollback and release-audit mechanisms.
• Establish secure configuration and secret-management practices.
• Enable developer self-service while maintaining appropriate governance and controls.

5. Security & Compliance

• Design secure AWS architectures appropriate for financial-services and enterprise workloads.
• Implement IAM, KMS, Secrets Manager, CloudTrail, AWS Config, GuardDuty and Security Hub controls.
• Define network security, WAF, encryption and vulnerability-management standards.
• Support security audits and compliance requirements including PCI DSS, ISO 27001 and CIS benchmarks.
• Establish security monitoring, incident-response and remediation practices.

6. Reliability, High Availability & Disaster Recovery

• Design multi-AZ and fault-tolerant architectures.
• Define availability, RPO and RTO requirements and translate them into technical architecture.
• Implement backup, restore and disaster-recovery strategies.
• Establish health checks, auto scaling, capacity planning and failure-handling mechanisms.
• Conduct recovery testing and resilience assessments.
• Define and enforce production-readiness standards.

7. Observability & Production Operations

• Establish standards for infrastructure and application metrics, logs, traces and alerts.
• Implement centralized monitoring and operational dashboards.
• Define SLA/SLO monitoring and production health standards.
• Establish incident-response, root-cause-analysis and operational runbooks.
• Drive proactive capacity, performance and reliability monitoring.

8. Cloud Cost Management

• Establish cloud cost visibility, tagging and allocation standards.
• Implement budgets, alerts and regular cost reviews.
• Drive rightsizing, Savings Plans/Reserved Instances and resource optimization.
• Optimize storage, data-transfer and infrastructure costs.
• Balance cloud cost optimization with performance, security and availability requirements.

9. Cloud Architecture & Engineering Governance

• Define cloud architecture standards, reference architectures and engineering guidelines.
• Review solution architectures and major infrastructure changes.
• Maintain Architecture Decision Records and technical standards.
• Define and review non-functional requirements for cloud workloads.
• Review production readiness and operational maturity.
• Identify and manage cloud technical debt.

10. Cloud Capability & Technical Leadership

• Establish internal cloud engineering standards and best practices.
• Mentor engineering and DevOps teams on AWS architecture and cloud-native practices.
• Create reusable templates, reference implementations and operational documentation.
• Develop cloud training and knowledge-sharing programs.
• Drive adoption of automation and engineering excellence across technology teams.

Mandatory Technical Skills

• Strong hands-on AWS production experience.
• AWS Organizations, Control Tower, IAM / IAM Identity Center and VPC architecture.
• Transit Gateway, Route 53, ALB/NLB, WAF and hybrid connectivity.
• EC2, EKS and/or ECS, ECR, RDS, S3, ElastiCache and other AWS managed services.
• CloudWatch, CloudTrail, KMS, Secrets Manager, GuardDuty, Security Hub and AWS Config.
• Terraform with experience designing reusable modules and managing infrastructure at scale.
• Docker and strong understanding of Kubernetes; Helm experience is preferred.
• CI/CD using GitLab, Jenkins, GitHub Actions or AWS-native tooling.
• Strong Linux and networking fundamentals.
• Experience with monitoring and observability tools such as Prometheus, Grafana and OpenSearch/ELK.

Preferred Experience

• Experience in banking, capital markets, brokerage, FinTech, payments or other regulated environments.
• Experience designing high-availability and disaster-recovery architectures for mission-critical systems.
• Experience with hybrid cloud and on-premises integration.
• AWS Certified Solutions Architect – Professional or equivalent certification.
• Experience establishing cloud governance, security and cost-management practices.
• Experience leading cloud transformation or migration programs.

About our client:

Our client develops enterprise-grade capital market & wealth management platforms including RMS, OMS, Trading, Wealth, PMS, AMC, AIF, Backoffice, Mobile & Digital Platforms. Our platforms support high-volume transaction processing, real-time market data distribution, multi-tenant deployments, & financial workloads.

NOTE:

Professionals interested to explore the opportunity can share their updated CV with current salary detail and notice period to: rakhee@teamrecruiter.in