AWS Platform Architect & Lead

Immediate need for a talented AWS Platform Architect & Lead. This is a 12+ months contract opportunity with long-term potential and is located in Canada (Remote).

Job
-31157

Pay Range: $80/hr - $83/hour.

• Platform Foundation & Infrastructure
• Own and evolve the AWS multi-account architecture: account vending, AWS Control Tower governance, SCPs, and organizational unit design that enforces workload and identity boundaries.
• Design and operate the core networking layer — VPCs, Transit Gateway, Private Link, Direct Connect, and segmentation policies that all workloads inherit.
• Build and maintain a centralized IaC module library (Terraform and/or AWS CDK): versioned, opinionated primitives covering compute, networking, storage, security, and observability that product and engineering teams consume directly.
• Establish and enforce platform-wide security baselines: IAM role design, permission boundaries, KMS key hierarchy, secrets management patterns, and zero-trust network posture.
• Own the platform Fin Ops strategy — Reserved Instance and Savings Plan coverage, cost allocation tagging, chargeback models, and automated rightsizing.
• Drive CI/CD and Git Ops strategy for infrastructure delivery, ensuring consistent, auditable, and self service deployment patterns across all environments.
• Runtime Patterns & Reference Implementations
• Define and own runtime execution patterns for the platform: containerized workloads (EKS/ECS/Fargate), serverless (Lambda), and the scaling, lifecycle, and deployment standards that govern them.
• Build orchestration infrastructure supporting complex, multi-step workloads: workflow engines, event-driven triggers (Event Bridge, SQS, Step Functions), and inter-service coordination patterns.
• Design data persistence and state management strategies across the platform — covering relational, No
  
  SQL, caching, and object storage — with clear guidance on when to use each.
• Develop and publish canonical reference implementations: production-ready patterns for common workload types that engineering teams clone, adapt, and own — reducing time-to-production and ensuring architectural consistency.
• Standardize integration patterns across the platform: service connectivity, authentication flows, API gateway configurations, and cross-account access models.
• Partner with application and product engineering teams to translate workload requirements into reusable platform capabilities, so new use cases can be onboarded without custom platform work.
• Team Leadership & Engineering Culture
• Lead, mentor, and grow a team of platform engineers, setting technical direction, running design and code reviews, and building a high-bar engineering culture.
• Drive the RFC and architectural review process across both foundational and runtime platform domains.
• Champion a self-service platform model — application teams should be able to deploy and operate workloads without requiring platform team intervention for every request.
• Serve as the primary technical authority for platform-layer decisions across engineering, security, and product stakeholders.
• Partner with recruiting to attract and assess platform engineering talent. Security, Observability & Reliability
• Implement observability standards across the full platform stack: infrastructure metrics, distributed tracing, log aggregation, and alerting that gives teams operational confidence.
• Ensure all platform layers meet security and compliance requirements — audit trails, data residency controls, encryption standards, and access governance.
• Own platform-layer incident response: on-call rotation structure, runbook standards, and a blameless post-mortem culture.
• Define and track platform SLOs and reliability targets, with clear escalation paths when services…