Cloud Platform Architect

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Cloud & Infrastructure Engineering position at the Director level, which is part of the job family responsible for managing and optimizing technical infrastructure and ensuring the seamless operation of IT systems to support business needs effectively.

Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals.

Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on.

PEArch is seeking a Cloud Platform Engineering Architect to support the ETRADE Cloud program. The role will contribute to the design and evolution of secure, resilient, scalable, automated, and well-governed platform capabilities, with primary expertise in Google Cloud Platform (GCP). The architect will translate application, business, security, infrastructure, and operational requirements into reusable platform architecture patterns aligned with enterprise architecture, engineering, risk, and regulatory standards.

The architect will work across platform engineering, application development, cloud infrastructure, cybersecurity, networking, operations, risk, and governance teams. The role will shape target-state and transitional architectures, establish reusable platform patterns, support proofs of concept, and guide engineering teams through implementation and production readiness. The primary focus is enabling ETRADE workloads on GCP while supporting integration with existing enterprise environments and, where applicable, AWS services.

What you’ll do in the role:

Own and contribute to end-to-end platform engineering architecture for ETRADE cloud capabilities, from conceptual design through implementation and production readiness.

Define target-state, transitional, and migration architectures for applications moving from existing environments to secure cloud-native platforms.

Develop reference architectures, architecture principles, reusable patterns, standards, guardrails, and decision records for platform services.

Design cloud landing-zone capabilities covering organization and project structures, networking, identity, security controls, logging, monitoring, policy enforcement, and operational governance.

Create platform architecture patterns for Kubernetes, workload identity, APIs, event-driven services, data services, observability, resiliency, and automation.

Design and guide GCP capabilities using GKE, Compute Engine, Cloud Storage, Cloud SQL, Pub/Sub, Cloud Load Balancing, Cloud DNS, Secret Manager, Cloud KMS, and Cloud Monitoring.

Define platform product capabilities and paved-road patterns that enable secure self-service provisioning, consistent developer experience, and repeatable workload onboarding.

Establish architecture for infrastructure as code, CI/CD, Git Ops, policy as code, configuration management, automated testing, vulnerability scanning, artifact governance, and environment promotion.

Design infrastructure architecture covering virtual networks, subnets, routing, firewalls, private connectivity, ingress, egress, DNS, proxies, load balancing, certificates, secrets, and key management.

Define secure connectivity patterns across GCP, enterprise data centers, SaaS providers, external services, and AWS where required.

Guide GKE and Kubernetes architecture including private clusters, workload identity, secrets management, ingress, autoscaling, network policy, cluster security, resiliency, upgrades, and…