Cloud Architect – AWS / Azure

KSTACK; São Paulo; On-site; BRL 240,000 - 360,000; Full time

Job summary

KSTACK is seeking a Cloud Architect to lead the design and governance of enterprise cloud platforms in Brazil. You will partner with product, security, and engineering teams to deliver scalable, secure, and automated cloud solutions across AWS and Azure.

The role emphasizes building reliable platforms with IaC, applying SRE practices, and guiding CI/CD pipelines. Strong English and experience with regulated environments are valued.

Qualifications

• AWS and/or Azure cloud architecture experience.
• Kubernetes platforms including EKS, AKS, OpenShift.
• Terraform or other Infrastructure as Code (IaC) platforms.
• CI/CD technologies, including Harness, GitHub Enterprise, Jenkins.
• Cloud networking and security.
• Observability tools such as Dynatrace, Prometheus, and Grafana.
• Site Reliability Engineering (SRE) practices, including SLIs, SLOs, and incident management.
• Enterprise architecture and governance.

Responsibilities

• Define target-state cloud architectures and reference architecture standards.
• Design highly available, scalable, and secure cloud infrastructure.
• Drive the adoption of cloud-native technologies and cloud modernization initiatives.
• Review application architectures to ensure alignment with enterprise standards.
• Architect and maintain Kubernetes platforms, including Amazon EKS and Azure AKS.
• Develop reusable infrastructure patterns using Infrastructure as Code (IaC).
• Establish platform standards, governance controls, and operational guardrails.
• Drive platform automation and enable self-service capabilities.
• Define reliability, availability, and performance objectives.
• Lead proactive resilience engineering and capacity planning initiatives.
• Implement observability, monitoring, logging, and incident response capabilities.
• Conduct operational readiness reviews and provide production support guidance.
• Design and govern CI/CD solutions using Harness, GitHub Enterprise, Artifactory, and related tools.
• Establish deployment standards and release automation strategies.
• Enable secure and reliable software delivery pipelines.
• Partner with development teams to improve deployment reliability and delivery velocity.
• Define testing standards for failure scenarios and recovery validation.
• Develop reliability dashboards and governance processes.
• Collaborate with security teams to establish and maintain cloud security controls.
• Support the implementation of workload protection and compliance requirements.
• Evaluate cloud security tools and cloud-native security capabilities.
• Ensure cloud architectures align with enterprise risk management and audit requirements.
• Provide architectural guidance to engineering and operations teams.
• Mentor engineers and fellow architects.
• Lead technical architecture reviews and design workshops.
• Drive strategic cloud transformation initiatives.

Skills

Cloud architecture

SRE practices (SLIs/SLOs)

Enterprise architecture & governance

Platform engineering & developer → en-

Cloud security & compliance frameworks

Tools

Kubernetes (EKS, AKS, OpenShift)

Terraform / IaC

Harness / GitHub Enterprise / Jenkins

CI/CD tooling

Observability: Dynatrace / Prometheus / Grafana

Cloud networking & security tools

Job description

The Cloud Architect is responsible for the architecture, design, governance, and operational excellence of enterprise cloud platforms. This role partners closely with application development, infrastructure, security, and product teams to design and deliver scalable, secure, resilient, and automated cloud solutions across AWS and Azure environments.

Key Responsibilities

• Define target-state cloud architectures and reference architecture standards.
• Design highly available, scalable, and secure cloud infrastructure.
• Drive the adoption of cloud-native technologies and cloud modernization initiatives.
• Review application architectures to ensure alignment with enterprise standards.
• Architect and maintain Kubernetes platforms, including Amazon EKS and Azure AKS.
• Develop reusable infrastructure patterns using Infrastructure as Code (IaC).
• Establish platform standards, governance controls, and operational guardrails.
• Drive platform automation and enable self-service capabilities.

Site Reliability Engineering (SRE)

• Define reliability, availability, and performance objectives.
• Lead proactive resilience engineering and capacity planning initiatives.
• Implement observability, monitoring, logging, and incident response capabilities.
• Conduct operational readiness reviews and provide production support guidance.

CI/CD & DevOps

• Design and govern CI/CD solutions using Harness, GitHub Enterprise, Artifactory, and related tools.
• Establish deployment standards and release automation strategies.
• Enable secure and reliable software delivery pipelines.
• Partner with development teams to improve deployment reliability and delivery velocity.

Resilience Engineering

• Define testing standards for failure scenarios and recovery validation.
• Develop reliability dashboards and governance processes.

Cloud Security & Compliance

• Collaborate with security teams to establish and maintain cloud security controls.
• Support the implementation of workload protection and compliance requirements.
• Evaluate cloud security tools and cloud-native security capabilities.
• Ensure cloud architectures align with enterprise risk management and audit requirements.

Technical Leadership

• Provide architectural guidance to engineering and operations teams.
• Mentor engineers and fellow architects.
• Lead technical architecture reviews and design workshops.
• Drive strategic cloud transformation initiatives.

Required Skills & Qualifications

• AWS and/or Azure cloud architecture
• Kubernetes platforms, including EKS, AKS, and OpenShift
• Terraform or other Infrastructure as Code (IaC) platforms
• CI/CD technologies, including Harness, GitHub Enterprise, Jenkins, and related tools
• Cloud networking and security
• Observability tools such as Dynatrace, Prometheus, and Grafana
• Site Reliability Engineering (SRE) practices, including SLIs, SLOs, and incident management
• Enterprise architecture and governance

Preferred Experience

• Experience working with large-scale enterprise cloud environments
• Background in financial services or other regulated industries
• Understanding of Identity and Access Management (IAM) and Role-Based Access Control (RBAC)
• Platform engineering and developer enablement
• Cloud security and compliance frameworks
• Drive architectural decisions and technical strategy.
• Influence cross-functional teams without direct reporting authority.
• Balance innovation, risk, reliability, and operational efficiency.
• Serve as a technical escalation point for critical platform issues.

Language Requirements

Advanced English proficiency is mandatory for this position.