Cloud Infrastructure Architect

Job Summary

We are looking for an experienced Cloud Infrastructure Architect to design, implement, and govern secure, scalable, and resilient cloud platforms across enterprise environments. The role will focus on cloud infrastructure architecture, enterprise landing zone design, disaster recovery (DR), security governance, automation, and operational excellence across multi-cloud or hybrid cloud ecosystems.

The ideal candidate should have strong expertise in cloud-native services, infrastructure modernization, networking, security, governance, high availability, and enterprise-scale cloud transformation programs.

Key Responsibilities

Cloud Architecture & Strategy

• Design enterprise-grade cloud infrastructure solutions across AWS, Azure, and/or GCP environments.
• Define cloud adoption strategies, target-state architectures, and modernization roadmaps.
• Establish scalable, secure, and cost-optimized cloud infrastructure patterns.
• Collaborate with enterprise architects, security teams, DevOps engineers, and application teams.

Landing Zone Architecture & Governance

• Design and implement enterprise cloud landing zones aligned with security, compliance, and governance standards.
• Define multi-account/subscription strategies, organizational hierarchy, and environment segregation.
• Implement:
• Identity and access management (IAM)
• Network segmentation
• Guardrails and policy enforcement
• Resource tagging standards
• Logging and monitoring frameworks
• Security baselines
• Establish centralized shared services architecture including:
• Connectivity hubs
• DNS
• CI/CD integration
• Secrets management
• Key management
• Enable infrastructure automation using Infrastructure as Code (IaC).

Disaster Recovery (DR) & Business Continuity

• Define enterprise DR strategies including:
• Active-Active
• Active-Passive
• Pilot Light
• Warm Standby
• Design multi-region and cross-region resilience architectures.
• Define and validate:
• RTO (Recovery Time Objective)
• RPO (Recovery Point Objective)
• Conduct DR drills, failover testing, and resiliency assessments.
• Architect backup, replication, and recovery solutions for:
• Compute
• Databases
• Kubernetes workloads
• File systems
• Messaging systems
• Ensure high availability and fault tolerance for mission-critical workloads.

Security & Compliance

• Implement cloud security best practices and zero-trust architecture principles.
• Work closely with cybersecurity and compliance teams to enforce governance standards.
• Implement:
• Encryption strategies
• Network security controls
• SIEM integration
• Threat detection and monitoring
• Security posture management
• Support compliance frameworks such as ISO 27001, SOC2, HIPAA, GDPR, PCI-DSS, etc.

Cloud Operations & Optimization

• Establish observability and monitoring frameworks.
• Optimize cloud cost, performance, scalability, and operational efficiency.
• Define operational runbooks, SOPs, and support models.
• Support capacity planning and infrastructure lifecycle management.

Required Skills & Experience

Technical Skills

• Strong experience with cloud platforms:
• Amazon Web Services
• Microsoft Azure
• Google Cloud
• Expertise in:
• Landing Zone architecture
• Cloud networking
• DR architecture
• Infrastructure security
• Identity and access management
• Kubernetes and container platforms
• Strong understanding of:
• Hybrid cloud architecture
• Multi-region deployment strategies
• HA/DR patterns
• Observability platforms
• Hands-on experience with:
• Terraform
• Kubernetes
• Docker
• GitHub Actions / Azure DevOps / Jenkins
• Monitoring tools
• Backup & recovery solutions

Experience

• 4+ years in infrastructure engineering or cloud architecture.
• 2-3+ years of hands-on cloud architecture experience.
• Experience designing enterprise landing zones and DR solutions at scale.
• Experience working with regulated enterprise environments preferred.

Preferred Certifications

• Amazon Web Services Certified Solutions Architect – Professional
• Microsoft Azure
• Kubernetes Certifications (CKA/CKAD)
• TOGAF or Enterprise Architecture certifications preferred

Soft Skills

• Strong stakeholder management and communication skills.
• Ability to lead architecture discussions and technical governance forums.
• Strong documentation and presentation capabilities.
• Problem-solving mindset with strategic thinking ability.

Nice to Have

Experience with:

• FinOps
• AI/ML cloud platforms
• Enterprise integration platforms
• Service mesh architectures
• Zero Trust security models
• Platform engineering
• SRE practices