AWS Solution Architect

Role: AWS Solution Architect

Type: Permanent

Mode: Hybrid working

Location: Munich/ Boblingen

Language: English speaking

NOTE: NO Visa Sponsorship

Primary skills

• Landing zone & governance: hands-on experience with AWS Control Tower, AWS Organizations, Account Factory for Terraform (AFT), IAM Identity Center with Entra ID federation (SAML/SCIM), least-privilege design, and account-vending automation.
• Networking & security: Transit Gateway (hub-and-spoke), VPC / CIDR / IPAM, Route 53, AWS Network Firewall / centralised egress, Direct Connect / VPN, and Security Hub, GuardDuty and AWS Config.
• Automation & delivery: advanced Terraform (including AFT customizations), CI/CD, and workload onboarding.

Required Skills & Certifications:

• AWS Control Tower, Account Factory for Terraform (AFT)
• AWS Organizations, Service Control Policies (SCPs)
• Infrastructure-as-Code: Terraform (required --- Advantest already uses it)
• AWS Identity Center Entra ID federation (SCIM, SAML)
• AWS Transit Gateway, Direct Connect, centralized networking
• CI/CD pipelines for infrastructure (CodePipeline/GitHub Actions)
• AWS Solutions Architect Professional or equivalent.
• Must be able to design and implement multi-account landing zone architecture
• Experience with Account Factory for Terraform (not just vanilla Control Tower)
• Familiarity with enterprise identity federation (Entra ID / Azure AD → AWS IAM Identity Center).