Cloud Architect

Job-:
Technology

Location:

Tampa, FL, United States

Schedule:

Full time, Day Posted:
The Cloud Architect is a hands-on technical role within the Cloud Platform Engineering organization.  You will define and evolve the architecture of a secure, highly available, multi-account AWS platform supporting regulated SaaS applications.

This role leads cloud platform modernization and transformation initiatives, owning architecture standards, reference designs, resilience patterns, and technical direction across platform and application engineering teams. You will assess existing systems, define pragmatic migration and modernization paths, turn business and product needs into target-state AWS architectures, and guide implementation so the platform becomes more scalable, secure, reliable, operable, cost-aware, and compliant.

Architecture ownership is central to this role: you will set platform standards and make architecture recommendations within the cloud domain, while implementation is delivered in partnership with platform engineering, security, operations, data, and application teams.

Position Responsibilities:

Cloud Architecture and Technical Strategy Define target-state AWS architectures, reference architectures, and decision records for secure, scalable, cloud-native SaaS platforms.

Lead architecture reviews and translate product, engineering, and enterprise technology roadmaps into implementable cloud designs.

Design modernization strategies spanning serverless services, Amazon ECS and AWS Fargate, EC2 Linux workloads, APIs, and event-driven components.

Establish architectural standards for availability, scalability, performance, capacity, service boundaries, tenant isolation, and operational readiness.

Guide to multi-region resilience and disaster-recovery architecture, including backup ownership, RTO and RPO targets, failover approaches, and restore testing.

Security, Compliance, and Risk Architecture Design cloud controls that support HIPAA regulatory requirements, SOC 2 attestation commitments, and HITRUST certification requirements.

Partner with security and compliance teams to implement controls, maintain control-to-code mappings, produce audit evidence, support control walkthroughs, and remediate penetration-test findings.

Define patterns for IAM, permission boundaries, AWS Organizations service control policies, KMS encryption, Secrets Manager, Parameter Store, and least-privilege access.

Establish cloud security posture and vulnerability-management patterns using services such as AWS Config, Security Hub, Inspector, Guard Duty, Cloud Trail, and centralized audit-log retention, as applicable to the environment.

Ensure architecture decisions address data protection, secure tenant isolation, key management, secrets handling, and customer security requirements.

Networking, Data, and Platform Governance Define enterprise AWS networking patterns using Transit Gateway, Site-to-Site VPN, Direct Connect, Private Link, routing controls, and private service access.

Set architectural direction for Amazon RDS for MySQL and Aurora, DynamoDB, Elasti Cache, data durability, backup, recovery, replication, and performance tradeoffs.

Own cloud landing-zone standards and multi-account governance across AWS Organizations and Control Tower, including account vending, guardrails, centralized logging, and policy enforcement.

Create reusable Terraform module standards covering versioning, remote state, code review, drift detection, testing, and safe change management.

Modernization, Transformation, and Platform Enablement Assess current-state application and infrastructure environments, identify modernization opportunities, and create phased transformation roadmaps with clear business and technical outcomes.

Develop migration and modernization patterns for rehosting, replatforming, refactoring, containerization, serverless adoption, and retirement of legacy services.

Establish platform golden paths and self-service provisioning patterns that help engineering teams adopt approved AWS architectures consistently and securely.

Define observability architecture across Cloud Watch and Datadog, including service-level objectives, telemetry standards, alert quality, dashboards, and operational ownership.

Improve operational readiness by defining patching, maintenance-window, change-management, exception, and customer-notification patterns for hosted environments.

Lead or facilitate complex incident reviews and ensure that corrective actions result in durable…