Control Tower where appropriate. Architect core infrastructure services including VPC, EC2, S3, Route 53, load balancing, Transit Gateway, Direct Connect, VPN, IAM, KMS, CloudWatch and CloudTrail. Lead technical decision-making for migration, transformation and modernisation initiatives while balancing governance with delivery agility. Apply AWS Well-Architected principles to improve … least-privilege design. Infrastructure as Code: Terraform and/or CloudFormation, including modular design, version control and environment promotion practices. Monitoring and operations: CloudWatch, CloudTrail, OpenSearch/ELK, Grafana, Prometheus or similar tooling. Operating systems and platform administration: Linux and Windows, scripting and automation using Shell, Python or equivalent. ...