Cloud Architect

Ofelia; Grenoble; Remote; EUR 110,000 - 160,000; Full time

Job summary

Ofelia in Grenoble, France, is seeking a Senior Cloud Architect to lead our cloud transition as we move to a full SaaS model. You will own the platform’s cloud architecture end-to-end, with AWS primary and a second provider, ensuring security, scalability, and multi-tenant design.

You will partner with Head of Architecture and Cloud/DevOps teams, mentor engineers, and define best practices, disaster recovery, and FinOps. The role is remote (100%) with global impact.

Qualifications

• Senior experience in cloud architecture and infrastructure, including production environments.
• Hands-on experience taking a SaaS product to production from its early stages.
• AWS certification required (Solutions Architect Professional preferred).
• Deep Kubernetes expertise: cluster architecture, Helm, operators, service mesh, security (RBAC, network policies, admission controllers).
• Strong automation background: Terraform (essential), Ansible, CI/CD pipelines (GitLab CI, GitHub Actions, ArgoCD).
• Multi-tenant architecture: tenant isolation, data modeling, onboarding flows.
• Operational resilience: disaster recovery (RTO/RPO), backup strategy, SLA/SLO definition.
• Data layer: managed databases, storage, and data migration.
• Cloud-native security: IAM, secrets management, encryption, audit practices (ISO 27001, SOC 2, GDPR).
• Solid grasp of microservices architecture, networking (VPC, DNS, load balancing), and observability (Prometheus, Grafana, CloudWatch...).
• Cost-conscious cloud engineering (FinOps): cost optimization and budget governance.
• Comfort integrating generative AI services in production (e.g., Amazon Bedrock or equivalent). Deep Bedrock experience is a strong plus.
• Daily, hands-on use of AI-assisted coding tools
• Nice-to-have: Certification on a second cloud provider (Azure, GCP)
• Nice-to-have: Familiarity with EU data residency/sovereignty requirements (GDPR)
• Nice-to-have: AI-assisted intelligent monitoring and alerting

Responsibilities

• Design and evolve the platform's multi-tenant cloud architecture with AWS as primary and a second provider.
• Define and promote architecture best practices: high availability, resilience, FinOps.
• Lead containerization and orchestration with Kubernetes, including cluster design and security.
• Industrialize provisioning with Terraform and CI/CD pipelines (GitOps).
• Integrate generative AI services, notably Amazon Bedrock, including governance.
• Own cloud security architecture with ISO 27001/SOC 2 and IAM, encryption.
• Define operational resilience: DR, backup strategy, SLA/SLO.
• Mentor and upskill DevOps and engineering teams.
• Maintain active technology watch and challenge architecture choices.
• Collaborate with Head of Architecture and Cloud/DevOps teams.

Skills

Cloud architecture

SaaS to production

Automation

Containerization

Kubernetes

Terraform

CI/CD pipelines

AI integration

Security

Education

AWS certification

Tools

Terraform

Ansible

GitLab CI

GitHub Actions

ArgoCD

Kubernetes

Helm

Prometheus

Grafana

CloudWatch

Job description

Languages: French (primary working language), professional English

Remote: 100%

ABOUT OFELIA

Ofelia (formerly Bonitasoft) is an AI-native orchestration platform that turns every business process into a fluid, conversational experience, driven by intelligent, governed agents. We help Business and IT teams automate what matters, without complexity, without friction.

ABOUT THE ROLE

We are building our cloud offering to a full SaaS model, and building a new Architecture team to lead that shift.

You’ll partner closely with our Head of Architecture on the software-and-cloud vision, and work day to day with the Cloud/DevOps and Platform teams. You’ll have real ownership over how we build, secure, and scale the platform as it grows from where it is today toward a multi-tenant, multi-customer product.

HOW WE WORK : ARCHITECTURE BUILT TOGETHER

This role comes with real autonomy, on purpose. Our Head of Architecture will be closely involved at the start, introducing you to the teams and setting direction, and will then step back to let you drive your own scope. We’re not looking for someone to manage closely; we’re looking for someone who can take a blank page and own it, and who knows when to loop others in.

The Architecture team itself is still taking shape, so a lot of how we work will be built together with you. In practice, that means direct, frequent exchanges with the teams below rather than layers of process, closer to mentorship and architecture review than top-down direction:

• Head of Architecture (hiring manager) : software & AI architecture, partnering for a unified product vision
• Cloud/DevOps team : daily collaboration and mentoring
• Platform team : cross-cutting architecture topics
• Information Security Officer : validating cloud security choices

THE DAY-TO-DAY JOB

Day to day, you’ll own the cloud side of that transition end to end:

• Design and evolve the platform's multi-tenant cloud architecture (tenant isolation, data models, onboarding flows), robust, scalable, and secure, with AWS as the primary provider and a second cloud provider
• Define and promote architecture best practices: high availability, resilience, cost optimization (FinOps)
• Lead containerization and orchestration with Kubernetes (cluster design, networking, security, observability, lifecycle management)
• Industrialize provisioning and deployments through Infrastructure as Code (Terraform) and CI/CD pipelines (GitOps)
• Integrate and operationalize generative AI services, notably Amazon Bedrock (model selection, RAG, AI usage governance)
• Own the cloud security architecture, in partnership with our Information Security Officer, who covers ISO 27001/SOC 2 compliance: IAM, encryption, network segmentation, cluster hardening, threat modeling
• Define operational resilience practices: disaster recovery (RTO/RPO), backup strategy, SLA/SLO
• Mentor and upskill the DevOps and engineering teams
• Maintain active technology watch and challenge existing architecture choices

THE PERSON WE'RE LOOKING FOR

Experience & certifications:

• Senior experience in cloud architecture and infrastructure, including several years in critical production environments
• Hands-on experience taking a SaaS product to production from its early stages
• AWS certification required (Solutions Architect Professional preferred)

Technical skills:

• Deep Kubernetes expertise: cluster architecture, Helm, operators, service mesh, security (RBAC, network policies, admission controllers)
• Strong automation background: Terraform (essential), Ansible, CI/CD pipelines (GitLab CI, GitHub Actions, ArgoCD)
• Multi-tenant architecture: tenant isolation, data modeling, onboarding flows
• Operational resilience: disaster recovery (RTO/RPO), backup strategy, SLA/SLO definition
• Data layer: managed databases, storage, and data migration
• Cloud-native security: IAM, secrets management, encryption, audit practices (in partnership with our security team on ISO 27001, SOC 2, GDPR)
• Solid grasp of microservices architecture, networking (VPC, DNS, load balancing), and observability (Prometheus, Grafana, CloudWatch...)
• Cost-conscious cloud engineering (FinOps): cost optimization and budget governance
• Comfort integrating generative AI services in production (e.g., Amazon Bedrock or equivalent). Deep Bedrock experience is a strong plus
• Daily, hands-on use of AI-assisted coding tools

Nice-to-have:

• Certification on a second cloud provider (Azure, GCP)
• Familiarity with EU data residency/sovereignty requirements (relevant given GDPR compliance and sovereign cloud options)
• AI-assisted intelligent monitoring and alerting