AWS Architect

We are hiring for AWS Solution Architect in Munich/Boblingen, Germany - Hybrid - Permanent

NOTE: No visa sponsored and looking 4 weeks of joiniees.

Skills:

• Landing zone & governance: hands-on experience with AWS Control Tower, AWS Organizations, Account Factory for Terraform (AFT), IAM Identity Center with Entra ID federation (SAML/SCIM), least-privilege design, and account-vending automation.
• Networking & security: Transit Gateway (hub-and-spoke), VPC / CIDR / IPAM, Route 53, AWS Network Firewall / centralised egress, Direct Connect / VPN, and Security Hub, GuardDuty and AWS Config.
• Automation & delivery: advanced Terraform (including AFT customizations), CI/CD, and workload onboarding.

AWS Control Tower, Account Factory for Terraform (AFT)

AWS Organizations, Service Control Policies (SCPs)

Infrastructure-as-Code: Terraform (required — Advantest already uses it)

AWS Identity Center + Entra ID federation (SCIM, SAML)

AWS Transit Gateway, Direct Connect, centralized networking

CI/CD pipelines for infrastructure (CodePipeline/GitHub Actions)

AWS Solutions Architect Professional or equivalent.

Must be able to design and implement multi-account landing zone architecture

Experience with Account Factory for Terraform (not just vanilla Control Tower)

Familiarity with enterprise identity federation (Entra ID / Azure AD → AWS IAM Identity Center)