AWS Solution Architect

Role: AWS Solution Architect

Type: Permanent

Mode: Hybrid working

Location: Munich/ Boblingen

Language: English speaking

NOTE: NO Visa Sponsorship

Primary skills

• Landing zone & governance: hands-on experience with AWS Control Tower, AWS Organizations, Account Factory for Terraform (AFT), IAM Identity Center with Entra ID federation (SAML/SCIM), least-privilege design, and account-vending automation.

• Networking & security: Transit Gateway (hub-and-spoke), VPC / CIDR / IPAM, Route 53, AWS Network Firewall / centralised egress, Direct Connect / VPN, and Security Hub, GuardDuty and AWS Config.

• Automation & delivery: advanced Terraform (including AFT customizations), CI/CD, and workload onboarding.

Required Skills & Certifications:

• AWS Control Tower, Account Factory for Terraform (AFT)

• AWS Organizations, Service Control Policies (SCPs)

• Infrastructure-as-Code: Terraform (required — Advantest already uses it)

• AWS Identity Center + Entra ID federation (SCIM, SAML)

• AWS Transit Gateway, Direct Connect, centralized networking

• CI/CD pipelines for infrastructure (CodePipeline/GitHub Actions)

• AWS Solutions Architect Professional or equivalent.

• Must be able to design and implement multi-account landing zone architecture

• Experience with Account Factory for Terraform (not just vanilla Control Tower)

• Familiarity with enterprise identity federation (Entra ID / Azure AD → AWS IAM Identity Center)