Cloud Architect

Key Responsibilities

Cloud Architecture & Engineering (Azure & AWS)

• Define and own reference architectures, landing zones, and platform blueprints across Azure and AWS.
• Design and implement production workloads spanning compute, networking, storage, databases, containers, and serverless services in both clouds.
• Lead cloud migration, modernization, and workload placement decisions, including cross-cloud and hybrid scenarios.
• Ensure parity in governance, reliability, security, and operational standards across Azure and AWS where appropriate.
• Write and maintain production Infrastructure as Code (Terraform required; Bicep, ARM, and CloudFormation as applicable).
• Act as the technical escalation point for complex cloud architecture and engineering issues.

Identity, Access & Governance

• Design enterprise IAM models across Azure (Entra ID) and AWS (IAM, IAM Identity Center)
• Implement least-privilege access using role-based, attribute-based, and group-based controls
• Architect federation, SSO, and conditional access patterns integrated with Microsoft Entra ID
• Lead periodic access reviews, governance processes, and policy-as-code enforcement
• Align cloud access controls with enterprise identity standards and audit requirements

Network, DNS, Domains & Certificates

• Architect cloud networking including VNets/VPCs, transit networking, private endpoints, peering, and hybrid connectivity
• Own and govern DNS and domain services across Amazon Route 53, GoDaddy, Marcaria, and Microsoft tenant DNS records
• Manage the full domain lifecycle: acquisition, registration, renewals, transfers, and decommissioning
• Coordinate certificate strategy and renewals with Security and Infrastructure teams
• Maintain accurate, current DNS, network, and domain documentation

Security Collaboration (SOC-Partnered)

• Translate SOC and Security Architecture requirements into cloud-native controls and guardrails
• Partner with the SOC on logging, monitoring, alerting, and SIEM integration across both clouds
• Support security investigations by providing cloud context, forensic access, and remediation
• Participate in security reviews, audits, and certifications as the cloud subject-matter expert
• Ensure cloud services remain continuously compliant with approved security baselines

Cost Management & FinOps

• Own dual-cloud cost visibility, forecasting, chargeback/showback, and optimization across Azure and AWS
• Drive continuous cost optimization through rightsizing, commitment management (Azure Reservations/Savings Plans, AWS Reserved Instances/Savings Plans), and architectural improvements
• Partner with Finance and IT leadership on cloud budget planning and ROI reporting
• Establish FinOps practices and cost guardrails as part of the landing zone

Operations, Reliability & Team Enablement

• Define SLOs, runbooks, and incident response patterns for cloud workloads
• Act as escalation for cloud-related incidents, changes, and post-incident reviews
• Mentor cloud engineers and upskill the broader IT team on Azure and AWS best practices
• Participate in change management and on-call rotations as required
• Produce and maintain clear architecture diagrams, design documents, standards, and operational runbooks as the source of truth for cloud environment.