Cloud Teach Lead Architect

Keoni; Paris; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Keoni is seeking an experienced Cloud Tech Lead Architect to design and implement industrialized landing zones on GCP and S3ns, integrating applications with secure, scalable environments.

The role requires expertise in IAM, VPCs, cloud security, and CI/CD pipelines, with a focus on DevSecOps and FinOps-aligned governance. Based in Paris, on-site collaboration with cross-functional teams is essential.

Qualifications

• Advanced GCP capabilities including IAM, VPCs, and network design.
• Experience with S3ns and sovereignty constraints.
• IaC with Terraform and modular design for landing zones.
• Security-focused DevSecOps with compliant pipelines.

Responsibilities

• Define target architectures for GCP and S3ns landing zones.
• Design organizational models: accounts, projects, networks, IAM.
• Implement IaC and automate landing zones and CI/CD pipelines.
• Collaborate with cybersecurity and architecture teams.

Skills

GCP expertise

S3ns ecosystem

Terraform IaC

DevSecOps

Cloud security

CI/CD

Advanced networking

Zero Trust

Tools

Terraform

Bitbucket

Tekton

Job description

# Cloud Teach Lead Architect* Home* Cloud Teach Lead Architect* May 15, 2026* 0 Comments* By Roberte OkoyaCONTEXT: The client has launched a strategic program to modernize its IT infrastructure. To enable this transformation, the IT department aims to position itself as a Cloud Service Provider serving the group's business units and brands. To support the gradual migration of its application portfolio to these environments, the client wants to define and implement industrialized, secure, operational, and robust landing zones on GCP and S3ns. The cloud strategy is based on a principle of portability, allowing for automated and predictable application deployment, both internally and in the external cloud. In this context, the client is seeking an experienced Cloud Tech Lead.MISSIONS The Cloud Tech Lead will act as the technical expert and support the implementation of GCP and S3ns landing zones, as well as the integration of applications into these environments. Scoping and Design • Define and formalize the target architectures of the GCP and S3ns landing zones. • Design organizational models: accounts, projects, networks, IAM, policies. • Integrate the client's Cloud doctrine requirements, regulatory constraints, and cybersecurity standards. • Identify development, deployment, governance, and monitoring patterns. Technical Implementation • Design, automate, and industrialize the landing zones using Terraform or equivalent (IaC). • Implement the Cloud foundations: o IAM / RBAC o Network, segmentation, and interconnections o Logs, monitoring, alerting, and observability o Authorized service catalog o Security (CSPM, KMS, compliance) • Define and support the implementation of associated CI/CD pipelines.Governance, Security, and Compliance • Define onboarding patterns and best practices. • Implement automated security and compliance controls. • Work closely with the cybersecurity and architecture teams. Project Support • Support application teams in adopting new cloud environments. • Analyze project needs and continuously adapt landing zones. • Contribute to documentation, training, and skills development for internal teams.Coordination and communication • Collaborate closely with the program teams. • Present architectural choices, technical decisions, and roadmaps. • Participate in project meetings and ceremonies, and contribute to overall project management.Required Skills Technical Skills • Advanced GCP Expertise: o Resource hierarchy, IAM o VPC, firewalling, hybrid connectivity o Cloud Logging and Cloud Monitoring o Cloud Storage, GKE, Cloud Functions (depending on scope) • Good knowledge of the S3ns ecosystem and its sovereignty constraints. • Infrastructure as Code (Terraform): module design, pipelines, best practices. • DevSecOps: IaC and application deployment, CI/CD, self-service. • Cloud Security: Zero Trust, encryption, KMS, compliance controls. • CI/CD: Bitbucket, Digital Release, Tekton. • Advanced Networking: DNS, routing, VPN, Cloud/hybrid interconnections.Methodological Skills • Scoping and designing Cloud landing zones in accordance with FinOps principles. • Ability to explain and document technical choices effectively. • Experience supporting application projects migrating to the Cloud. • Implementation and governance of resource tagging (FinOps, management). • Proficiency in agile or hybrid environments.