Cloud Architect

Acclime; Ahmedabad District; On-site; INR 250,000 - 520,000; Full time

Job summary

Acclime in India seeks a Senior Cloud Architect to own reference architectures across Azure and AWS, design and implement production workloads, and lead cloud migration and modernization in hybrid scenarios.

Responsibilities include governance, security, IAM, networking, DNS, certificate management, FinOps, and mentoring engineers while ensuring reliable, compliant cloud services.

Qualifications

• Experience leading multi-cloud architecture initiatives across Azure and AWS.
• Strong IaC background with Terraform or equivalent tooling.
• Exposure to FinOps, governance, and security in cloud environments.

Responsibilities

• Define and own reference architectures, landing zones, and platform blueprints across Azure and AWS.
• Design and implement production workloads spanning compute, networking, storage, databases, containers, and serverless services in both clouds.
• Lead cloud migration, modernization, and workload placement decisions, including cross-cloud and hybrid scenarios.
• Ensure parity in governance, reliability, security, and operational standards across Azure and AWS where appropriate.
• Write and maintain production Infrastructure as Code (Terraform required; Bicep, ARM, and CloudFormation as applicable).
• Act as the technical escalation point for complex cloud architecture and engineering issues.

Skills

Cloud architecture

Azure

AWS

Terraform

IaC

Security governance

FinOps

IAM

Networking

Tools

Terraform

Bicep

CloudFormation

Route 53

GoDaddy DNS

Job description

• Define and own reference architectures, landing zones, and platform blueprints across Azure and AWS.
• Design and implement production workloads spanning compute, networking, storage, databases, containers, and serverless services in both clouds.
• Lead cloud migration, modernization, and workload placement decisions, including cross-cloud and hybrid scenarios.
• Ensure parity in governance, reliability, security, and operational standards across Azure and AWS where appropriate.
• Write and maintain production Infrastructure as Code (Terraform required; Bicep, ARM, and CloudFormation as applicable).
• Act as the technical escalation point for complex cloud architecture and engineering issues.

Identity, Access & Governance

• Design enterprise IAM models across Azure (Entra ID) and AWS (IAM, IAM Identity Center)
• Implement least-privilege access using role-based, attribute-based, and group-based controls
• Architect federation, SSO, and conditional access patterns integrated with Microsoft Entra ID
• Lead periodic access reviews, governance processes, and policy-as-code enforcement
• Align cloud access controls with enterprise identity standards and audit requirements

Network, DNS, Domains & Certificates

• Architect cloud networking including VNets/VPCs, transit networking, private endpoints, peering, and hybrid connectivity
• Own and govern DNS and domain services across Amazon Route 53, GoDaddy, Marcaria, and Microsoft tenant DNS records
• Manage the full domain lifecycle: acquisition, registration, renewals, transfers, and decommissioning
• Coordinate certificate strategy and renewals with Security and Infrastructure teams
• Maintain accurate, current DNS, network, and domain documentation

Security Collaboration (SOC-Partnered)

• Translate SOC and Security Architecture requirements into cloud-native controls and guardrails
• Partner with the SOC on logging, monitoring, alerting, and SIEM integration across both clouds
• Support security investigations by providing cloud context, forensic access, and remediation
• Participate in security reviews, audits, and certifications as the cloud subject-matter expert
• Ensure cloud services remain continuously compliant with approved security baselines

Cost Management & FinOps

• Own dual-cloud cost visibility, forecasting, chargeback/showback, and optimization across Azure and AWS
• Drive continuous cost optimization through rightsizing, commitment management (Azure Reservations/Savings Plans, AWS Reserved Instances/Savings Plans), and architectural improvements
• Partner with Finance and IT leadership on cloud budget planning and ROI reporting
• Establish FinOps practices and cost guardrails as part of the landing zone

Operations, Reliability & Team Enablement

• Define SLOs, runbooks, and incident response patterns for cloud workloads
• Act as escalation for cloud-related incidents, changes, and post-incident reviews
• Mentor cloud engineers and upskill the broader IT team on Azure and AWS best practices
• Participate in change management and on-call rotations as required