> Markdown version of [/jobs/ext/2247790-cloud-architect](https://www.wearedevelopers.com/jobs/ext/2247790-cloud-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Architect - **Company:** Experis - **Location:** Oxford, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Artificial Intelligence, Amazon Web Services, Confluence, Microsoft Azure, Bash Shell, Border Gateway Protocol, BigQuery, Cloud Computing, Cloud Engineering, Code Review, Cyber Security, Continuous Integration, Data Integration, Extract Transform Load (ETL), DevOps, Domain Name System (DNS), Github, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Key Management, Network Security, Microsoft Visio, Windows PowerShell, Azure Active Directory, Cloud Services, Zero Trust Network Access, Microsoft SharePoint, Software Vulnerability Management, Azure Service Bus, Google Cloud, Data Classification, Performance Testing, Autoscaling, Istio, Multi-Cloud, Gitlab, Git, Data Lakes, Kubernetes, Hashicorp, AWS Fargate, Apache Kafka, Linkerd (Service Mesh), CIS Benchmarks, Terraform, Serverless Computing - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815095515-cloud-architect ## About the Role * 8+ years in cloud architecture/engineering; 3+ years multi-cloud across Azure, AWS, and GCP. * Proven delivery of enterprise landing zones, Kubernetes, IaC at scale, and secure network architectures. * Strong track record in app migration/modernisation and cost optimisation. * Comfortable in highly regulated environments (finance, healthcare, public sector) is a plus. Technical Stack (Desired) * Networking: DNS, TLS/mTLS, BGP, NAT, WAF, CDN, private endpoints, service endpoints. * Compute/Containers: AKS/EKS/GKE, ECS/Fargate, VMSS/ASG, serverless (Lambda, Azure Functions, Cloud Functions). * Security: Defender for Cloud, Sentinel, AWS GuardDuty/Security Hub, GCP SCC, OPA, HashiCorp Vault, KMS. * Scripting: Python/Bash/PowerShell; strong Git and code review practices. Certifications (Nice to Have) * AWS: Solutions Architect Professional, DevOps Engineer * GCP: Professional Cloud Architect, DevOps Engineer ## Description Cloud Architect Key Responsibilities * Define and socialise target state architectures across Azure/AWS/GCP (networking, identity, landing zones, operations). * Deliver reference architectures and reusable patterns for containerised, serverless, and data workloads. * Lead migration and modernisation (re-host/re-platform/re-factor) for priority applications. * Implement IaC at scale (Terraform preferred; standard modules; pipelines). * Build observability (logs, metrics, traces, SLOs) and resilience (HA, DR, RTO/RPO). * Produce HLDs/LLDs, diagrams, ADRs, non-functional requirements, and traceability to business goals. * Select and justify cloud services (compute, storage, data, AI/ML, integration). * Design identity and access (Azure AD/Microsoft Entra, AWS IAM, GCP IAM; SSO; workload identities). * Build/optimise Kubernetes platforms (AKS/EKS/GKE), service mesh (Istio/Linkerd), ingress, and autoscaling. * Implement CI/CD (GitHub Actions/Azure DevOps/GitLab), environment promotion, secrets management, artifact repos. * Security & Compliance * Define guardrails (CIS benchmarks), cloud security posture management (Defender for Cloud, AWS Security Hub, GCP SCC). * Vaulting and KMS (AWS KMS, Azure Key Vault, GCP KMS), key rotation, data classification & encryption. * Threat modelling, zero trust patterns, vulnerability management, incident runbooks. * Data & Integration * Reference architectures for streaming/batch (Kafka/MSK, Event Hubs, Pub/Sub), data lakes, warehouses (BigQuery, Synapse, Redshift), ETL/ELT. * Operations & Reliability * Performance testing, capacity planning, SLO/SLIs, error budgets. * Governance & Cost * Landing zone governance, tagging/labels, budget alerts, reserved/savings plans. * Operating model definition (RACI), platform backlog, roadmap, and risk management. * Stakeholder Management * Run workshops, architecture reviews, and design clinics. * Collaborate with InfoSec, Network, Data, and App teams; mentor engineers. Required Experience * 8+ years in cloud architecture/engineering; 3+ years multi-cloud across Azure, AWS, and GCP. * Proven delivery of enterprise landing zones, Kubernetes, IaC at scale, and secure network architectures. * Strong track record in app migration/modernisation and cost optimisation. * Comfortable in highly regulated environments (finance, healthcare, public sector) is a plus. Technical Stack (Desired) * Networking: DNS, TLS/mTLS, BGP, NAT, WAF, CDN, private endpoints, service endpoints. * Compute/Containers: AKS/EKS/GKE, ECS/Fargate, VMSS/ASG, serverless (Lambda, Azure Functions, Cloud Functions). * Security: Defender for Cloud, Sentinel, AWS GuardDuty/Security Hub, GCP SCC, OPA, HashiCorp Vault, KMS. * Scripting: Python/Bash/PowerShell; strong Git and code review practices. Certifications (Nice to Have) * AWS: Solutions Architect Professional, DevOps Engineer * GCP: Professional Cloud Architect, DevOps Engineer Soft Skills * Excellent communicator-able to translate complex architecture into clear, actionable plans. * Pragmatic, delivery-focused, and comfortable with ambiguity. * Strong stakeholder management and mentoring capabilities. * Cloud Target Operating Model & reference architectures. * Landing zone designs and implementation (per cloud). * Network & identity blueprints and runbooks. * IaC repositories (Terraform modules, pipelines) with documentation. * Security patterns (guardrails, policies, encryption standards). * Observability standards (dashboards, alerts, SLOs). * Application migration plans (waves, dependency maps) and executed milestones. * FinOps reports and cost optimisation recommendations. KPIs / Success Measures * % workloads onboarded to landing zones with guardrails enforced. * Mean time to provision environments (baseline vs target). * % policy compliance (CIS/NIST) and critical vulnerabilities remediated. * Cost savings realised (rightsizing, reservations), forecast accuracy. * Uptime/SLO adherence and incident reduction. Ways of Working * Hybrid: 2-3 days per week in Oxford; flexibility during key milestones. * Cadence: Weekly architecture forum, sprint rituals with squads, monthly exec updates. * Documentation: Diagrams (Draw.io/Visio), ADRs in Git, Confluence/SharePoint. * Tooling Access: Provided by client (SSO, VPN, repositories). Seniority level Mid-Senior level Employment type Contract Job function Other Industries Construction ## Related Videos - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)