IT Architect

About the role

We are looking for an IT Architect to join our Core Platform & Lab Services organization based in our Heathrow, FL office. This is a senior individual contributor role on the CPLS team with primary ownership of AWS cloud architecture and broad responsibility across Cohesity's hybrid infrastructure.

Responsibilities

• AWS & Cloud Architecture:
  • Own the architecture of Cohesity's AWS environment, including landing zone design, account structure, network topology, IAM, and cost governance.
  • Define and maintain cloud architecture standards and guardrails across compute, storage, networking, containers, and serverless services.
  • Architect multi-account AWS environments using AWS Organizations, Control Tower, and Service Control Policies.
  • Evaluate and recommend AWS services and architectural patterns; produce documented trade-off analyses with clear recommendations.
• Engineering Lab Infrastructure Architecture:
  • Design virtualization, compute, storage, and networking architecture for lab environments at scale, including resource pooling, tenant isolation, and capacity management across concurrent product workloads.
  • Architect hardware lifecycle and bare-metal provisioning workflows; define automation frameworks for VM provisioning, environment management, and self-service infrastructure consumption.
  • Define observability and resiliency architecture for lab environments; ensure lab availability and performance meet the needs of internal product engineering teams.
• Hybrid Infrastructure Architecture:
  • Define integration patterns and connectivity standards between on-premises environments and cloud, including identity federation and network segmentation.
  • Design compute, storage, and networking architectures for enterprise workloads across hybrid environments.
  • Architect disaster recovery and resiliency patterns; define RTO/RPO requirements and validate through design.
  • Maintain service dependency models in CMDB to support impact analysis and incident response.
• AI Infrastructure Architecture:
  • Own the infrastructure architecture for Cohesity's internal AI foundry platform: GPU and accelerator compute environments, multi-tenant model serving infrastructure, and AI data pipeline architecture.
  • Design AI agent orchestration infrastructure: tool-use patterns, multi-agent system topology, and MCP/API integration patterns that are safe and governable at enterprise scale.
  • Architect the AI API gateway layer: model routing, rate limiting, cost allocation, audit logging, and controls that prevent ungoverned shadow AI consumption across the organization.
  • Define the observability architecture for AI workloads as a distinct layer from traditional infrastructure monitoring -- covering model drift detection, hallucination and quality monitoring, and prompt/response logging for compliance and evaluation pipelines.
  • Architect AI-specific security controls: IAM and zero-trust patterns extended to AI workloads, LLM-specific attack surface coverage including prompt injection, data exfiltration via model output, and supply chain risks in model and tool dependencies.
• Platform & Enterprise Services Architecture:
  • Contribute to CMDB governance and CI lifecycle architecture; define and maintain service dependency and data model standards.
  • Architect Kubernetes-based platform services; define container orchestration standards, Helm patterns, and GitOps workflows.
  • Design integration patterns between enterprise SaaS platforms, internal systems, and AWS-hosted services.
  • Define API governance standards, event-driven integration patterns, and data flow architecture.
• Standards, Governance & Roadmap:
  • Co-own the CPLS technology roadmap with IT leadership; translate architectural direction into prioritized initiatives with clear business rationale.
  • Own Architecture Decision Records (ADRs) for significant design choices; document context, options, decision, and consequences.
  • Define and maintain reference architectures and architecture standards for assigned domains.
  • Participate in architecture review and provide design approval for initiatives within the domain.
  • Reduce architectural fragmentation by championing reusable, documented patterns over bespoke one-off implementations.
  • Produce curated, opinionated technology guidance for the CPLS team: translate emerging technology into clear assessments of what it means for our existing architecture and what we should do about it.
• Cross-Functional Leadership & Mentorship:
  • Partner with IT engineering, operations, network, security, and service management teams to ensure architectures are viable, secure, and operable.
  • Communicate architectural decisions clearly to both technical peers and non-technical stakeholders including IT leadership.
  • Mentor IC3/IC4 engineers; provide design guidance and architectural review for complex implementations.
  • Contribute to the technical growth of the broader IT team through documentation, design reviews, and knowledge sharing.

Qualifications

• 8+ years of experience in IT infrastructure or cloud architecture roles, with at least 4 years focused on AWS.
• Deep, hands-on AWS expertise: VPC, EC2, S3, RDS, EKS, Lambda, IAM, Organizations, Control Tower, Transit Gateway, Direct Connect, and related services.
• Demonstrated experience designing and governing multi-account AWS environments at enterprise scale.
• Strong proficiency in infrastructure-as-code, specifically Terraform; experience with Ansible or equivalent.
• Experience architecting large-scale virtualization environments; familiarity with VM lifecycle management, resource scheduling, and multi-tenant isolation at scale.
• Experience architecting hybrid cloud environments connecting on-premises infrastructure to AWS.
• Proficiency in cloud cost management: tagging strategies, cost allocation, Reserved Instance planning, and FinOps frameworks.
• Experience with identity and access management architecture including Entra ID, SSO/SAML/OIDC, RBAC, and zero-trust network access.
• Strong understanding of network architecture: routing, DNS, firewalls, load balancing, and hybrid connectivity patterns.
• Experience producing architecture documentation including high-level designs, reference architectures, and ADRs.
• Demonstrated ability to influence technical direction across teams without direct authority.
• Strong communication skills: able to translate complex architectural decisions for both engineering and executive audiences.