• Design and implement AWS account structure using AWS Organizations • Create and manage Organizational Units (OUs) based on business requirements and best practices • Establish account governance policies and standards • Implement consolidated billing and cost allocation strategies • Deploy and manage AWS Control Tower for automated account provisioning and governance • Implement Landing Zone Architecture (LZA) for scalable, secure multi-account environments • Design and deploy Virtual Private Clouds (VPCs) across multiple regions • Configure and manage VPN connections (Site-to-Site VPN and Client VPN) • Implement AWS Direct Connect for hybrid cloud connectivity • Design network segmentation strategies using subnets, route tables, and network ACLs • Configure Transit Gateway for multi-VPC connectivity • Manage DNS using Route 53 • Architect network solutions for AWS GovCloud environments • Design and implement IAM policies, roles, and permission boundaries • Establish identity federation with corporate identity providers • Implement least privilege access principles • Create and manage service control policies (SCPs) at the organization level • Configure multi-factor authentication (MFA) requirements • Develop IAM governance and compliance frameworks • Design and implement security policies across the organization • Configure AWS Security Hub, GuardDuty, and AWS Config • Implement encryption strategies for data at rest and in transit • Establish security monitoring and incident response procedures • Ensure compliance with industry standards (SOC 2, ISO 27001, HIPAA, etc.) • Maintain FedRAMP compliance requirements and controls • Design and implement security architectures for AWS GovCloud (US) regions • Conduct security assessments and vulnerability management • Implement AWS WAF and Shield for application protection • Create infrastructure as code using AWS CloudFormation or Terraform • Develop and maintain architectural documentation and diagrams • Provide technical guidance and mentorship to engineering teams • Participate in disaster recovery planning and testing • Optimize cloud costs and resource utilization