<div class="show-more-less-html__markup show-more-less-html__markup--clamp-after-5 relative overflow-hidden"> <p><strong><em>Role: AWS Solution Architect</em></strong></p><p><strong><em>Type: Permanent</em></strong></p><p><strong><em>Mode: Hybrid working</em></strong></p><p><strong><em>Location: Munich/ Boblingen</em></strong></p><p><strong><em>Language: English speaking</em></strong></p><p><br/></p><p>NOTE: NO Visa Sponsorship</p><p><br/></p><p><strong><em>Primary skills </em></strong></p><p><br/></p><p>• Landing zone &amp; governance: hands-on experience with AWS Control Tower, AWS Organizations, Account Factory for Terraform (AFT), IAM Identity Center with Entra ID federation (SAML/SCIM), least-privilege design, and account-vending automation.</p><p>• Networking &amp; security: Transit Gateway (hub-and-spoke), VPC / CIDR / IPAM, Route 53, AWS Network Firewall / centralised egress, Direct Connect / VPN, and Security Hub, GuardDuty and AWS Config.</p><p>• Automation &amp; delivery: advanced Terraform (including AFT customizations), CI/CD, and workload onboarding.</p><p><br/></p><p><strong><em>Required Skills &amp; Certifications: </em></strong></p><p><br/></p><p>• AWS Control Tower, Account Factory for Terraform (AFT)</p><p>• AWS Organizations, Service Control Policies (SCPs)</p><p>• Infrastructure-as-Code: Terraform (required — Advantest already uses it)</p><p>• AWS Identity Center + Entra ID federation (SCIM, SAML)</p><p>• AWS Transit Gateway, Direct Connect, centralized networking</p><p>• CI/CD pipelines for infrastructure (CodePipeline/GitHub Actions)</p><p>• AWS Solutions Architect Professional or equivalent.</p><p>• Must be able to design and implement multi-account landing zone architecture</p><p>• Experience with Account Factory for Terraform (not just vanilla Control Tower)</p><p>• Familiarity with enterprise identity federation (Entra ID / Azure AD → AWS IAM Identity Center)</p><p><br/></p> </div>