Cloud Architect with Enterprise Security focus

Cloud Infrastructure Architect

We are looking for a Cloud Architect to lead the design and implementation of enterprise-wide secure cloud architecture, starting with AWS and extending into a future multi-cloud strategy encompassing Azure and Google Cloud Platform.

This is a high-impact role for someone who thrives at the intersection of cloud networking, security architecture, platform engineering, and hands-on solution implementation.

What You Will Do

• Architect and implement secure enterprise-wide ingress and egress frameworks for cloud workloads.
• Design scalable cloud architecture patterns, including VPCs, Transit Gateways, hybrid connectivity, internet access, partner access, and shared-services architectures.
• Define cloud security guardrails aligned with Zero Trust principles.
• Assess and optimize an established AWS environment while developing reusable patterns for future Azure and Google Cloud Platform adoption.
• Lead end-to-end solutioning from architecture and design through implementation.
• Drive Infrastructure-as-Code, supported by automation-first practices.
• Partner with Security, Infrastructure, Platform Engineering, Application, and Operations teams to establish enterprise cloud standards.

What We Are Looking For

• 10+ years of experience in defining cloud architecture.
• 5+ years of hands-on AWS architecture and implementation experience.
• Proven experience designing enterprise-scale secure cloud architectures.
• Strong understanding of cloud connectivity, routing, DNS, firewalls, load balancing, network segmentation, and private access patterns.
• Experience leading architecture and implementation for large-scale cloud transformation initiatives.
• Ability to create high-level and low-level designs and work effectively with technical and executive stakeholders.

Technical Expertise

Core Skill Alignment

Cloud Architecture

• Enterprise Cloud Architecture
• Secure Cloud Architecture
• AWS Architecture & Implementation
• Multi-Cloud Strategy
• Cloud Transformation

Cloud Networking

• VPC
• Transit Gateway
• Direct Connect
• Route 53
• PrivateLink
• Hybrid Connectivity
• Network Segmentation
• Routing
• DNS
• Load Balancing
• Secure Ingress/Egress
• Private Access Patterns

Cloud Security

• Zero Trust
• AWS WAF
• IAM
• AWS Security Hub
• GuardDuty
• Control Tower
• Security Guardrails
• Network Security
• Governance

Automation & DevOps

• Terraform
• CloudFormation
• Infrastructure-as-Code
• CI/CD Pipelines
• Python
• Shell Scripting
• Automation-First Practices

Azure – Preferred

• Azure Landing Zones
• Azure Virtual WAN
• Hub-and-Spoke Networking
• Azure Firewall
• Gateway
• ExpressRoute

Google Cloud Platform – Preferred

• Shared VPC
• Cloud NAT
• Cloud Armor
• Network Security
• Cloud Interconnect

Architecture & Leadership

• High-Level Design (HLD)
• Low-Level Design (LLD)
• Enterprise Standards
• Observability
• Cloud Governance
• Technical & Executive Stakeholder Management
• Cross-Functional Collaboration