Cloud Architect

Devopsroles

Tampa (FL)

Hybrid

USD 140,000 - 190,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Medical, vision, dental plans

401(k) with generous match

Benefits start on first day

Job summary

MHK in Tampa, FL seeks a Cloud Architect to define and evolve a secure, scalable AWS platform supporting regulated SaaS apps. This hands-on role owns architecture standards, reference designs, resilience patterns, and sets direction across platform and application teams.

You will drive modernization initiatives, guide multi-region strategies, and collaborate with security, operations, and data teams to deliver compliant, cost-aware solutions.

Qualifications

7+ years of AWS cloud architecture or related field.
Ability to define and communicate AWS architectures for scalable systems.
Experience leading modernization programs from assessment to production.
Proficient in Terraform and IaC with reusable modules.
Knowledge of regulated environments and compliance patterns.
Ability to influence engineering teams and trade off security, reliability, and cost.

Responsibilities

Define target-state AWS architectures and reference designs for secure SaaS platforms.
Lead architecture reviews translating roadmaps into cloud designs.
Design modernization strategies across serverless, ECS/Fargate, EC2, APIs.
Establish standards for availability, scalability, and security.
Guide multi-region resilience and disaster recovery planning.
Partner with security/compliance to implement controls and evidence.
Define cost, performance, and operational considerations in decisions.
Collaborate with platform teams to implement architectures in production.

Skills

Cloud architecture

Leadership

Strategic thinking

Cross-functional collaboration

Communication

Education

Bachelor’s degree in CS/Engineering/IS or equivalent

AWS Certifications (Architect/DevOps)

Tools

Terraform

AWS ECS

AWS Fargate

EC2 Linux

Lambda

API Gateway

AWS Config

GuardDuty

CloudWatch

Job description

The Cloud Architect is a hands-on technical role within the Cloud Platform Engineering organization. You will define and evolve the architecture of a secure, highly available, multi-account AWS platform supporting regulated SaaS applications.This role leads cloud platform modernization and transformation initiatives, owning architecture standards, reference designs, resilience patterns, and technical direction across platform and application engineering teams. You will assess existing systems, define pragmatic migration and modernization paths, turn business and product needs into target-state AWS architectures, and guide implementation so the platform becomes more scalable, secure, reliable, operable, cost-aware, and compliant.

Architecture ownership is central to this role:

you will set platform standards and make architecture recommendations within the cloud domain, while implementation is delivered in partnership with platform engineering, security, operations, data, and application teams.

Position Responsibilities:

Cloud Architecture and Technical Strategy

Define target-state AWS architectures, reference architectures, and decision records for secure, scalable, cloud-native SaaS platforms.
Lead architecture reviews and translate product, engineering, and enterprise technology roadmaps into implementable cloud designs.
Design modernization strategies spanning serverless services, Amazon ECS and AWS Fargate, EC2 Linux workloads, APIs, and event-driven components.
Establish architectural standards for availability, scalability, performance, capacity, service boundaries, tenant isolation, and operational readiness.
Guide to multi-region resilience and disaster-recovery architecture, including backup ownership, RTO and RPO targets, failover approaches, and restore testing.

Security, Compliance, and Risk Architecture

Design cloud controls that support HIPAA regulatory requirements, SOC 2 attestation commitments, and HITRUST certification requirements.
Partner with security and compliance teams to implement controls, maintain control-to-code mappings, produce audit evidence, support control walkthroughs, and remediate penetration-test findings.
Define patterns for IAM, permission boundaries, AWS Organizations service control policies, KMS encryption, Secrets Manager, Parameter Store, and least-privilege access.
Establish cloud security posture and vulnerability-management patterns using services such as AWS Config, Security Hub, Inspector, GuardDuty, CloudTrail, and centralized audit-log retention, as applicable to the environment.
Ensure architecture decisions address data protection, secure tenant isolation, key management, secrets handling, and customer security requirements.

Networking, Data, and Platform Governance

Define enterprise AWS networking patterns using Transit Gateway, Site-to-Site VPN, Direct Connect, PrivateLink, routing controls, and private service access.
Set architectural direction for Amazon RDS for MySQL and Aurora, DynamoDB, ElastiCache, data durability, backup, recovery, replication, and performance tradeoffs.
Own cloud landing-zone standards and multi-account governance across AWS Organizations and Control Tower, including account vending, guardrails, centralized logging, and policy enforcement.
Create reusable Terraform module standards covering versioning, remote state, code review, drift detection, testing, and safe change management.

Modernization, Transformation, and Platform Enablement

Assess current-state application and infrastructure environments, identify modernization opportunities, and create phased transformation roadmaps with clear business and technical outcomes.
Develop migration and modernization patterns for rehosting, replatforming, refactoring, containerization, serverless adoption, and retirement of legacy services.
Establish platform golden paths and self-service provisioning patterns that help engineering teams adopt approved AWS architectures consistently and securely.
Define observability architecture across CloudWatch and Datadog, including service-level objectives, telemetry standards, alert quality, dashboards, and operational ownership.
Improve operational readiness by defining patching, maintenance-window, change-management, exception, and customer-notification patterns for hosted environments.
Lead or facilitate complex incident reviews and ensure that corrective actions result in durable architectural improvements.
Help evaluate and pilot AI-assisted SRE or DevOps capabilities where they can safely improve incident triage, diagnosis, or remediation.
Incorporate cost, performance, reliability, and security tradeoffs into architecture decisions and contribute to rightsizing, savings-plan, reservation, and tag-based cost-attribution initiatives.
Communicate architecture decisions clearly to technical and non-technical stakeholders and build alignment across teams.

Implementation Partnership

Guide platform and application teams as they implement approved architectures, resolve design issues, and transition modernized services into production.
Use Terraform, Python, Bash, and lightweight delivery automation as needed to prove patterns, accelerate adoption, and remove implementation barriers; this is not primarily a CI/CD administration role.
Provide architectural input to GitHub Actions or other delivery pipelines where deployment safety, testing, security validation, and traceability are required.

Position Requirements:

7+ years of experience in AWS cloud architecture, cloud engineering, platform engineering, or a related discipline, including substantial production AWS experience.
Demonstrated ability to define and communicate AWS architectures for highly available, secure, scalable applications or SaaS platforms.
Demonstrated experience leading cloud modernization or transformation programs from current-state assessment through migration, implementation, and operational adoption.
Production experience with Terraform and Infrastructure as Code, including reusable modules, state management, versioning, testing, and drift control.
Strong understanding of AWS networking, identity and access management, encryption, logging, monitoring, and multi-account architecture.
Hands‑on familiarity with AWS compute and application patterns, including ECS, Fargate, EC2 Linux, Lambda, and API Gateway.
Experience designing or operating cloud environments subject to regulated or audited security requirements.
Ability to influence engineering teams, lead architecture discussions, and make sound tradeoffs among security, reliability, performance, delivery speed, and cost.

Education/Certification Requirement:

Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field, or equivalent practical experience.
AWS Certified Solutions Architect Associate, AWS Certified Solutions Architect Professional, or AWS Certified DevOps Engineer Professional; equivalent experience will be considered.

Preferred Qualifications

Experience with healthcare software, medical technology, regulated technology, or multi-tenant SaaS platforms.
Experience with compliance-as-code tools or practices such as AWS Config rules, OPA or Conftest, CIS benchmark hardening, or equivalent mechanisms.

Additional Requirements:

Must reside in or be willing to relocate to the Tampa, FL area within 90 days of start for hybrid collaboration.

At MHK we help health plans and pharmacy benefit managers deliver optimal care management across every member’s health journey. We do this through state-of-the-art technology that provides critical insights from member enrollment and maintenance through every stage of care and compliance. We believe that long-term partnerships are built on trust. Our team members are expected to build trusted advisory relationships - with MHK clients and one another - through responsive, transparent communication, while honoring commitments, and tying that trust to outcomes.

Benefits Snapshot: