Public Cloud Architect

The company is continuing to expand and modernize its enterprise AWS environment and is looking for a Public Cloud Architect to help design and build the next generation of its cloud platform.

This is a highly hands-on architecture role with the opportunity to build and scale cloud capabilities from the ground up. You will help design, build, and implement enterprise AWS architecture, establish security and governance standards, and enable application teams to consume cloud services at scale.

You will work across major initiatives, including expanding the company’s AWS environment into multiple regions and helping modernize critical supply chain technology. This is a strong opportunity for an architect who wants meaningful ownership over AWS architecture within a large enterprise rather than simply maintaining an existing environment.

Key Responsibilities

• Design and maintain multi-account AWS Organizations structure - OU hierarchy, account vending, Control Tower guardrails
• Build and operate cloud landing zones using Account Factory for Terraform (AFT)
• Lead cloud security posture - SCPs, IAM Identity Center, GuardDuty, Security Hub, AWS Config, WAF
• Architect cloud networking - Transit Gateway, Direct Connect Gateway, VPC segmentation, private endpoints, DNS
• Define and maintain Terraform modules and CloudFormation templates
• Drive cost governance - tagging strategy, RI/Savings Plan optimization, monthly bill reviews
• Enable application teams - onboarding, quickstart docs, service catalog, quota management, architecture reviews
• Own exception tracking, naming/tagging standards, audit readiness (Well-Architected, compliance)
• Lead multi-region architecture to support TI’s expanding customer-serving footprint, * Greenfield opportunity: Build and shape foundational AWS capabilities rather than simply maintaining an existing environment.
• Significant scale: Work within a major enterprise with substantial investment in AWS.
• Enterprise impact: Your architecture will support critical technology across multiple areas of the business.
• Hands-on ownership: Design, build, and implement the architecture, infrastructure, and security policies.
• Major modernization initiatives: Contribute to multi-region cloud expansion and large-scale supply chain modernization.
• Strong compensation: $180K-$210K base, plus sign-on compensation and significant equity.

• AWS expertise required - not flexible on cloud provider
• 8+ years in cloud architecture, platform engineering, or infrastructure
• Deep AWS expertise - multi-account strategy, Organizations, Control Tower, account vending (AFT)
• Strong Terraform/IaC experience at scale
• Kubernetes expertise - core orchestration tool at TI
• Hands-on AWS networking - VPC, Transit Gateway, Direct Connect, private endpoints
• Cloud security controls - SCPs, IAM Identity Center, GuardDuty, Security Hub
• CI/CD and GitOps workflows
• Bachelor’s degree in CS, Engineering, or equivalent experience

Nice-to-Have Qualifications

• Linux expertise
• Software development background
• AWS CloudFormation
• FinOps experience (RI/Savings Plan strategy, spot usage, chargeback)
• Compliance frameworks - CIS, NIST 800-53, AWS Well-Architected reviews
• Observability tooling - CloudWatch, Grafana, Prometheus
• Identity federation - SAML/OIDC, Zero Trust, PAM
• OpenShift or other enterprise Kubernetes
• GPU/HPC workloads on cloud (EC2 P/G/Trn, GPU scheduling)
• Internal developer platforms - self-service portals, service catalogs
• AWS certifications (SA/DevOps Engineer Professional preferred)

Our client is a Fortune 200 technology company with a global footprint and a strong reputation for innovation. They operate at significant scale and are making major investments in modernizing their technology infrastructure and cloud capabilities. This is an opportunity to join a large, highly technical organization where cloud architecture has a direct impact across major areas of the business.