Cloud Architect

Experis Austria; City Of London; Remote; GBP 129,000 - 147,000; Full time

Benefits offered by this job

SC clearance eligible

Job summary

Experis Austria is seeking a Cloud Architect for a 6-12 month engagement in London with remote work. You will design secure, scalable AWS architectures and implement Zero Trust, multi-account governance, and automation with Terraform.

You will collaborate with engineering teams to realise architecture designs, review environments, and produce standards and roadmaps for security, resilience, and cost optimisation.

Qualifications

• Proven experience designing secure, scalable AWS environments.
• Strong knowledge of Zero Trust and least-privilege principles.
• Experience governing multi-account AWS landscapes with guardrails and SCPs.
• Hands-on IaC experience using Terraform.
• Familiarity with CI/CD pipelines and automation integration.

Responsibilities

• Design and maintain secure, scalable AWS cloud architectures.
• Define and implement Zero Trust principles with strong authentication and least privilege.
• Govern multi-account AWS environments with guardrails and SCPs.
• Automate provisioning using Terraform and IaC best practices.
• Develop reusable Terraform modules and deployment standards.
• Support enterprise landing zone capabilities, preferably AWS LZA.
• Design networking solutions (VPCs, Transit, Direct Connect, VPN).
• Work with AWS Organizations, Control Tower, IAM, and security services.
• Integrate infrastructure automation with CI/CD pipelines and delivery processes.
• Collaborate with engineering teams to troubleshoot and implement solutions.
• Participate in design reviews, POC, and platform improvements.
• Present architecture decisions clearly to stakeholders.

Skills

AWS architecture

Zero Trust security

Multi-account design

IaC automation

CI/CD integration

Networking design

Tools

Terraform

AWS Control Tower

AWS Landing Zone Accelerator

Job description

Cloud Architect

Duration - 6-12 months

London - Remote

£700 - £795 per day inside IR35 - umbrella

Active SC cleared or eligible candidates will be considered

Role overview/requirements:

• Design and maintain secure, scalable, resilient, and highly available AWS cloud architectures.
• Define and implement Zero Trust architecture principles, including identity-centric access, least privilege, strong authentication, network segmentation, and continuous verification.
• Design and govern multi-account AWS environments, including account structures, organisational units, guardrails, Service Control Policies, security controls, and account provisioning.
• Automate infrastructure provisioning and configuration using Terraform and Infrastructure as Code best practices.
• Develop reusable Terraform modules, automation patterns, and deployment standards.
• Support and enhance enterprise landing zone capabilities, preferably using AWS Landing Zone Accelerator (LZA).
• Design AWS networking solutions including VPCs, Transit Gateway, Direct Connect, VPN, routing, DNS, firewalls, private connectivity, and network segmentation.
• Work with AWS Organizations, Control Tower, IAM, SCPs, security services, logging, and compliance controls.
• Integrate infrastructure automation with CI/CD pipelines and engineering delivery processes.
• Work closely with engineering teams to troubleshoot issues, solve technical problems, and turn architectural designs into working solutions.
• Take an active role in delivery and implementation, rather than operating solely at a high-level architecture or advisory level.
• Participate in technical design reviews, proof-of-concepts,solution validation, and platform improvements.
• Present architecture, technical designs, recommendations, and trade-offs clearly to both technical and non-technical stakeholders.
• Communicate complex technical concepts in a clear, practical, and outcome-focused manner.
• Review existing AWS environments and recommend improvements across security, resilience, performance, operability, and cost optimisation.
• Produce architecture documentation, standards, reference patterns, decision records, and technical roadmaps.