Cloud Infrastructure Architect

Responsibilities

• Own cloud infrastructure architecture with AWS as the primary platform, ensuring alignment with business goals, security requirements, and SOC 2 and PCI-DSS compliance obligations
• Lead the architectural assessment of all acquired Azure environments — evaluating security posture, network topology, identity configuration, and workload dependencies
• Develop and maintain reference architectures, design patterns, and technology roadmaps that account for our hybrid AWS/Azure environment
• Evaluate emerging cloud technologies and make recommendations on adoption, retirement, or consolidation of platforms and services
• Lead architecture reviews and provide technical governance for infrastructure projects across the organization
• Conduct deep-dive assessments of acquired Azure environments, producing comprehensive documentation covering network architecture, security controls, identity and access configurations, workload inventories, and data flows
• Identify and drive remediation of security gaps and compliance deficiencies across acquired Azure environments in partnership with the Cloud Infrastructure Engineer and InfoSec team
• Develop detailed migration plans for transitioning data and workloads from acquired Azure environments into LINK, our AWS-hosted core line-of-business application
• Produce and maintain infrastructure documentation packages for the Product team, providing the architectural context needed to plan and execute LINK data migration workstreams
• Define and track progress against Azure rationalization milestones, keeping stakeholders informed on scope, risk, and timeline
• Partner with the VP of Infrastructure to author, maintain, and continuously improve infrastructure procedures, runbooks, and operational standards
• Define and document disaster recovery, business continuity, and incident response procedures for cloud infrastructure
• Create structured work and project pipelines for T1 Helpdesk, T2 Systems Administration, and T3 DevOps teams by translating architectural decisions into actionable implementation tasks
• Provide technical guidance and direction to the Cloud Infrastructure Engineer responsible for Azure day-to-day operations and security remediation
• Collaborate with DevOps to drive infrastructure-as-code (IaC) adoption and CI/CD pipeline improvements on AWS
• Work with the InfoSec team on conditional access, identity governance, and security posture across cloud environments
• Partner with the Product team as the infrastructure subject matter expert for LINK migration planning, ensuring data and workload dependencies are clearly understood before migration execution begins
• Lead cost optimization initiatives across AWS and Azure environments, including reserved instance planning, right-sizing, and architectural efficiency improvements
• Oversee cloud networking design, including VPCs, VNets, transit gateways, peering, DNS, and hybrid connectivity (Direct Connect / ExpressRoute)

Requirements

• 10+ years of experience in IT infrastructure, with at least 5 years focused on cloud architecture
• Deep hands-on expertise with AWS as a primary platform (compute, networking, storage, identity, security) and strong working proficiency with Microsoft Azure, including networking, security, identity, and infrastructure assessment
• Strong experience with SOC 2 and PCI-DSS compliance in a cloud environment
• Proficiency with infrastructure-as-code tools such as Terraform and/or CloudFormation
• Prowess with producing high-quality architectural documentation suitable for both technical teams and non-technical stakeholders such as Product and business leadership
• Experience developing migration plans for complex, multi-workload cloud environments

Preferred Qualifications

• Active certifications: AWS Solutions Architect - Professional, Microsoft Certified: Azure Solutions Architect Expert, or equivalent
• Experience evaluating and integrating cloud infrastructure from mergers or acquisitions, including workload assessment, security remediation, and migration planning
• Familiarity with DevSecOps practices and security tooling (e.g., Prisma Cloud, Wiz, AWS Security Hub, Microsoft Defender for Cloud)
• Experience with observability and monitoring platforms (Datadog, Grafana, CloudWatch, Azure Monitor)
• Prior experience in a senior IC or principal-level role at a company of 500+ employees