Cloud Architect

Job Description for Cloud Architect (Azure, AWS & Oracle OCI)

Multi-Cloud Architecture • Security & Governance • Enterprise-Scale Delivery

Position Summary

The Cloud Architect is responsible for designing, governing, and evolving SDD’s multi-cloud architecture across Microsoft Azure, Amazon Web Services (AWS), and Oracle Cloud Infrastructure (OCI).

The role ensures cloud platforms are secure, scalable, cost-efficient, resilient, and compliant with government and enterprise standards while supporting diverse workloads such as IaaS, PaaS, container platforms, databases, DR, and digital services.

This is a highly technical role requiring strong hands-on experience, deep architectural thinking, and the ability to guide engineering teams and senior stakeholders through complex cloud decisions.

Core Responsibilities

1. Multi-Cloud Architecture & Strategy

• Design and maintain reference architectures for:
• Azure, AWS, and Oracle OCI
• Hybrid and multi-cloud connectivity
• Sovereign cloud and data residency models
• Define cloud adoption patterns for:
• IaaS & PaaS workloads
• Container platforms (AKS, EKS, OKE)
• Database services (Azure SQL, RDS, Autonomous DB, Exadata)
• DR and business continuity
• Ensure consistency and interoperability across cloud providers.

2. Cloud Landing Zones & Foundations

• Architect and govern cloud Landing Zones for:
• Identity & access management
• Network segmentation
• Security baselines
• Logging and monitoring
• Cost management & tagging
• Implement enterprise standards for:
• Account/subscription structures
• Network hubs & spokes
• Shared services
• Multi-tenant isolation

3. Networking & Connectivity

• Design secure connectivity:
• Site-to-site VPN
• Client VPN
• ExpressRoute / Direct Connect / FastConnect
• Inter-cloud connectivity
• Define cloud network architectures:
• VPC/VNet design
• Subnetting and routing
• Load balancing
• DNS and traffic management

4. Security Architecture & Governance

• Define and enforce cloud security architecture:
• IAM, RBAC, least privilege
• Encryption at rest and in transit
• Key management (KMS, HSM)
• Secure network segmentation
• Zero Trust principles
• Ensure compliance with:
• Government security regulations
• ISO 27001 / NIST
• Cloud Security Alliance (CSA) guidance
• Collaborate with security teams on threat models and controls.

5. Platform, PaaS & Container Architecture

• Architect cloud-native platforms including:
• AKS, EKS, OKE
• Serverless (Azure Functions, Lambda)
• API gateways and integration services
• Define standards for:
• CI/CD integration
• DevSecOps pipelines
• Observability and monitoring
• Support application modernization and cloud-native adoption.

6. Resilience, DR & Availability

• Design HA/DR architectures:
• Multi-AZ / multi-region
• Backup & replication strategies
• Cross-cloud DR scenarios
• Define RTO/RPO targets and validate DR designs through testing.

7. Cost Optimization & FinOps Alignment

• Work closely with FinOps teams to:
• Define cost-efficient architectures
• Optimize resource sizing
• Implement tagging and chargeback models
• Evaluate reserved instances and savings plans
• Ensure architectural decisions consider long-term cost impact.

8. Technical Leadership & Governance

• Review and approve cloud designs and build documents.
• Guide engineering teams and vendors during implementation.
• Act as escalation point for complex technical challenges.
• Maintain architectural standards, patterns, and documentation.

9. Documentation & Stakeholder Engagement

• Produce high-quality documentation:
• Reference architectures
• Solution designs
• Standards and guidelines
• Decision records
• Present technical designs and trade-offs to senior management and governance boards.

Required Experience

• 1