Lead the architecture and design of AWS environments, including Landing Zones, multi-account structures, networking, IAM, security, resiliency, monitoring, backup, and disaster recovery. Own vendor governance, including SLAs, KPIs, service reviews, contracts, SOWs, risk management, and escalations.