Cloud Architect

Astreya; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical & Dental & Vision

401k Plan

Paid Time Off

Commuter Benefit

Education & Professional Development

Job summary

Astreya is seeking an Expert Cloud Architect in San Francisco to lead and deliver enterprise-scale cloud platform initiatives. You will architect across AWS, Azure and Azure Local, own the Terraform module strategy, and drive security, networking, and automation at scale.

You will mentor engineers, define standards, and guide multi-team delivery with a focus on observability, reliability, and cost governance within a high-performing Agile environment.

Qualifications

• Bachelor's degree or equivalent experience in a technical field.
• 8+ years in cloud infrastructure, systems engineering, or cloud architecture.
• 5+ years writing Terraform at scale (enterprise modules, multi-environment state).
• 4+ years designing/implementing CI/CD pipelines (Azure DevOps, GitHub Actions).
• 3+ years in a technical leadership or architecture role.

Responsibilities

• Own and evolve hybrid cloud platform architecture across AWS, Azure, and Azure Local.
• Define long-term technical roadmap for the platform team with the Sr. Cloud Principal Architect.
• Architect enterprise landing zones, topology, and identity federation strategies.
• Design complex hybrid networking solutions and cross-cloud connectivity.
• Lead architecture reviews and provide binding technical guidance.

Skills

Cloud architecture

Terraform

AWS and Azure

CI/CD

Security architecture

Leadership

Agile/Scrum

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Azure DevOps

Kubernetes

CI/CD tooling

Job description

Local W2 candidates only who are able to commute to the office 2-3 days a week

Department Overview

Information Technology delivers secure, resilient, and scalable enterprise platforms that support critical business applications, infrastructure services, cloud operations, automation, and emerging technology enablement.

Position Summary

The Expert Cloud Architect is a senior hands-on technical leader within the Hybrid Cloud Platform team who operates at the intersection of enterprise architecture strategy and deep infrastructure delivery. Reporting to the Sr. Cloud Principal Architect, this role owns the most complex architectural challenges — hybrid cloud connectivity, platform-wide automation frameworks, landing zone evolution, and cross-domain integration patterns — while remaining deeply embedded in code and delivery.

This role carries broader scope and higher autonomy than the Senior Cloud Architect. The Expert Cloud Architect sets technical direction for multi-team initiatives, defines enterprise-grade Terraform module standards, architects end-to-end platform capabilities, and drives adoption of emerging technologies (AI-assisted operations, autonomous infrastructure, advanced observability). They are expected to influence architecture decisions beyond their immediate team, partnering with enterprise architects, security leadership, and business stakeholders.

The Expert Cloud Architect spends hands-on time writing Terraform, designing pipeline architectures, building proof-of-concepts, and directly resolving the hardest technical problems the team encounters. They are the person who unblocks the Senior Cloud Architects when those architects are stuck.

The role spans AWS, Microsoft Azure, and private cloud platforms (Azure Local), with accountability for platform-wide design consistency, performance, security posture, and operational excellence across the hybrid estate.

Job Responsibilities

Architecture Strategy & Technical Direction

• Own and evolve the hybrid cloud platform architecture across AWS, Azure, and Azure Local — ensuring coherence, scalability, and security.
• Define and drive the long-term technical roadmap for the platform team in partnership with the Sr. Cloud Principal Architect.
• Architect enterprise landing zones, subscription/account topology, network segmentation, and identity federation strategies.
• Design complex hybrid networking solutions: vWAN, ExpressRoute, SD-WAN integration, network virtual appliances, cross-cloud connectivity.
• Establish architecture decision records (ADRs), design principles, and non-functional requirement frameworks for the platform.
• Evaluate emerging cloud services, open-source tools, and industry trends — make build/buy/adopt recommendations with clear trade-off analysis.
• Lead architecture reviews for high-impact or high-risk initiatives, providing binding technical guidance.

Hands-On Delivery (Infrastructure-as-Code & Platform Engineering)

• Author and maintain enterprise Terraform module libraries — defining patterns, interfaces, security defaults, and versioning strategies.
• Design and implement advanced CI/CD pipeline architectures in Azure DevOps for multi-environment, multi-subscription infrastructure delivery.
• Implement and validate security architectures through code — private endpoints, managed identities, CMK encryption, network micro-segmentation.
• Design and deploy Kubernetes platforms (AKS/EKS) with production-grade configurations: RBAC, network policies, ingress, service mesh, GitOps.
• Build proof-of-concepts and reference implementations that teams can adopt and extend.
• Resolve the hardest infrastructure challenges — state migration, provider upgrades, complex module refactoring, cross-account/subscription orchestration.
• Serve as the senior technical escalation point — unblock Senior Cloud Architects and platform engineers on the most complex problems.
• Lead cross-team architecture alignment sessions, ensuring consistent patterns across squads and workstreams.
• Define code review standards, module contribution guidelines, and quality gates for the Terraform module library.
• Mentor Senior Cloud Architects and platform engineers — elevate team capability through pairing, design reviews, and technical coaching.
• Drive engineering culture: infrastructure-as-code discipline, automated testing, documentation-as-code, and continuous improvement.
• Facilitate architecture guilds, communities of practice, and cross-functional technical forums.
• Translate complex technical trade-offs into clear recommendations for leadership and business stakeholders.

Enterprise & Cross-Functional Leadership

• Partner with enterprise architecture, security, networking, and compliance teams to shape platform standards and policies.
• Influence enterprise governance frameworks — Azure Policy, AWS SCPs, tagging standards, cost allocation, and resource lifecycle management.
• Drive platform observability strategy: centralized logging, distributed tracing, alerting frameworks, and AIOps integration.
• Support disaster recovery architecture, ransomware resilience, and business continuity planning for platform services.
• Contribute to vendor relationship management — evaluate cloud provider roadmaps, negotiate architectural patterns, and influence feature requests.
• Represent the platform team in enterprise architecture boards, change advisory processes, and technology governance forums.
• Support AI/ML platform infrastructure — GPU scheduling, model serving, feature stores, and MLOps pipeline architecture.

Must Have Qualifications:

• Bachelor's degree in Computer Science, a job-related discipline, or equivalent experience.
• 8 years of hands-on experience in cloud infrastructure, systems engineering, or cloud architecture roles.
• 5 years of hands-on experience writing Terraform at scale (enterprise module libraries, multi-environment state management, provider development).
• 4 years of experience designing and implementing CI/CD pipeline architectures (Azure DevOps, GitHub Actions, or equivalent).
• 3 years of experience in a technical leadership or architecture role — guiding teams, setting standards, making binding design decisions.
• Demonstrated experience architecting solutions across both AWS and Azure (multi-cloud, not just single-provider).
• Proven track record of resolving complex cross-domain infrastructure challenges (networking + security + compute + automation).
• Experience working in and leading within Agile/Scrum delivery teams.

Preferred Qualifications:

• AWS Solutions Architect Professional or Azure Solutions Architect Expert certification.
• Kubernetes certification (CKA/CKAD) or equivalent hands‑on container platform experience.
• Deep expertise in hybrid networking: ExpressRoute, vWAN, Transit Gateway, Palo Alto NVA, SD-WAN, BGP routing.
• Experience designing and operating enterprise landing zones (Azure CAF, AWS Control Tower, or custom).
• Knowledge of AI/ML infrastructure architecture — GPU compute, distributed training, model serving, MLOps.
• Experience with platform engineering practices: internal developer platforms, self-service infrastructure, golden paths.
• Familiarity with FinOps practices, cloud cost optimization, and resource rightsizing.
• Experience with compliance-as-code: Azure Policy, AWS Config Rules, OPA/Rego, Sentinel.
• Strong background in security architecture: zero-trust, identity federation (SAML/OIDC), private connectivity, secrets management.
• Excellent communication skills — ability to present architecture decisions to executives, write technical RFCs, and mentor effectively.
• Experience influencing technology strategy beyond the immediate team — enterprise architecture boards, COEs, or similar.

Salary Range:

• Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
• Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

Astreya offers comprehensive benefits to all Regular, Full-Time Employees, including:

• Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
• Dental provided through UHC
• Nationwide Vision provided by UHC
• Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
• Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
• Corporate Wellness Program provided by Goomi Group
• Employee Assistance Program
• Wellness Days
• 401k Plan
• Basic and Supplemental Life Insurance
• Short Term & Long Term Disability
• Critical Illness, Critical Hospital, and Voluntary Accident Insurance
• Paid Time Off (accrued and prorated, maximum of 120 hours annually)
• Paid Holidays
• Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law