The
Cloud Architect is accountable for the
endtoend cloud architecture, design standards, and technical governance across the modernization programcovering
infrastructure, application, and data platform transformations. This role defines the
targetstate cloud architecture, ensures security and compliance by design, and guides engineering teams through
landing zones, networking, identity, platform services, and migration patterns to deliver scalable, costefficient, and reliable solutions.
Key Responsibilities
Architecture & Strategy
- Define the targetstate cloud architecture (landing zones, network topology, identity, guardrails, platform services) aligned to business, security, and compliance requirements.
- Create reference architectures and patterns for application refactoring/replatforming, data ingestion/processing, and integration services.
- Drive cloud roadmaps, technology evaluations, and buildvsbuy recommendations (PaaS/SaaS/IaaS), including cost models and TCO.
Platform Engineering & Migration
- Lead setup of foundational cloud services: subscription/tenant structure, management groups, RBAC, policyascode, Key/Secret management, logging and monitoring.
- Govern migration factories (waves/sprints), selecting migration paths (rehost, replatform, refactor) and validating cutover/runbooks.
- Oversee InfrastructureasCode (Terraform/Bicep), pipelines, and environment automation for dev/test/stage/prod.
Security, Compliance & Resilience
- Embed Zero Trust principles, network segmentation (hubandspoke), firewall/NSG rules, Private Endpoints, and encryption controls.
- Ensure governance: Policies, tagging, cost controls, backup/DR, RTO/RPO alignment, and evidence for audits/regulatory needs.
- Partner with Security/Compliance teams on PII/PHI handling, data residency, and threat modeling.
Applications, Data & Integration Alignment
- Collaborate with Application and Data Architects to align platform services with app modernization (containers, serverless, PaaS) and data workloads (lakehouse, streaming, analytics).
- Define integration patterns (API gateways, messaging/queues, event streaming) and nonfunctional requirements (performance, reliability, observability).
- Support AI/analytics readiness (secure data access, search/indexing services, governance hooks).
Delivery Governance & Leadership
- Provide architecture governance through design reviews, ADRs, and architectural runway.
- Mentor engineers; resolve crossdomain design issues; ensure quality gates and operational readiness (SRE practices, telemetry).
- Communicate clearly with executives and stakeholders: risks, tradeoffs, and decision logs.
Required Experience
- 10+ years in architecture/engineering with handson cloud experience (Azure/AWS/GCP), including networking, identity, security, and platform services.
- Proven delivery of largescale migrations/modernization across applications and data platforms (rehost/replatform/refactor).
- Strong IaC (Terraform/Bicep/CloudFormation), CI/CD, and automation background; familiarity with Kubernetes/containers, serverless, API gateways, messaging/streaming (e.g., Kafka/Event Hubs).
- Deep understanding of governance & cost management, DR/BCP, observability, and performance engineering.
- Excellent stakeholder management and the ability to translate business goals into actionable architectures.
