Cloud Architect

LA International; United States; Hybrid; USD 104,000 - 129,000; Full time

Job summary

LA International is seeking a highly experienced Cloud Architect for a 6-month contract with extensions, based hybrid with some London onsite work. The role focuses on Azure-based hybrid architectures, security governance and reference architectures for landing zones, management groups, networking and identity.

The candidate will drive IaC, Terraform and Azure DevOps, and oversee cloud migration, modernisation and platform governance.

Qualifications

• CCSP, CISSP, or equivalent industry-recognised cloud/security certification.

Responsibilities

• Define and maintain target-state architecture for Microsoft Azure, cloud and hybrid technology platforms.

Job description

Cloud Architect

6 Month contract initially + Extensions

Based: Hybrid - Max 2 days p/w onsite in London.

Rate - £420 - £520 p/d via Umbrella

We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a Cloud Architect on a long term program of work.

Key Responsibilities:

• Define and maintain target-state architecture for Microsoft Azure, cloud and hybrid
• technology platforms.
• Define reference architectures and reusable patterns for Azure landing zones,
• Management Groups, subscriptions, networking, identity, compute, storage, monitoring
• and governance.
• Establish architectural principles and guardrails covering Azure Policy, RBAC, PIM,
• private connectivity, resource organisation, logging and platform governance.
• Define architecture patterns that enable scalable, secure and consistent
• technology delivery.
• Provide architectural direction for cloud migration, modernisation and re
• platforming initiatives.
• Assess new Azure services and cloud technologies and provide recommendations
• for their adoption.
• Ensure cloud architecture balances security, resilience, scalability, performance,
• operational supportability and cost efficiency.
• Define architectural direction for Infrastructure as Code and automated cloud
• provisioning, including Terraform and Azure DevOps.
• Maintain cloud platform architecture roadmaps aligned with the technology
• strategy.
• Hybrid Infrastructure Architecture
• Define target-state architecture for hybrid infrastructure and its integration
• with Microsoft Azure.
• Define target-state architectural patterns and standards for core infrastructure
• services, including technologies such as Active Directory, Entra ID, DNS, DHCP and PKI.
• Provide architectural direction for compute, virtualisation, storage and associated
• platform technologies.
• Define secure and resilient integration patterns between cloud, on-premises and
• third-party environments.
• Develop architecture roadmaps supporting infrastructure modernisation and
• reduction of legacy technology.
• Identify architectural dependencies, constraints and technical debt associated with
• hybrid infrastructure.
• Ensure infrastructure architecture supports agreed security, resilience, lifecycle and
• operational requirements.
• Network & Connectivity Architecture
• Define target-state network architecture across cloud and hybrid environments.
• Define reference architectures and patterns for Azure networking, routing,
• segmentation, firewalls, private connectivity, VPN, load balancing and application
• delivery.
• Define network architecture aligned with Zero Trust principles and security
• requirements.
• Provide architectural direction across Azure networking, Cisco technologies,
• Zscaler and associated network and security platforms.
• Define secure connectivity patterns between Azure, on-premises infrastructure,
• SaaS services, third parties and external services.
• Establish architecture standards and principles for network resilience,
• segmentation, availability and secure connectivity.
• Security Architecture & Technical Controls
• Define cloud platform and infrastructure security architecture aligned.
• security policies, enterprise architecture principles and regulatory requirements.
• Define security architecture patterns and technical guardrails across cloud,
• identity, network and infrastructure platforms.
• Provide architectural direction for Microsoft Defender, Sentinel and associated
• Microsoft security technologies.
• Define identity architecture covering Entra ID, Conditional Access, PIM, RBAC, MFA,
• SSO, managed identities and workload identities.
• Define architectural patterns for Azure Firewall, WAF, DDoS Protection, Key Vault,
• encryption, certificates and secrets management.
• Define architecture patterns aligned with Zero Trust principles across identity,
• network, applications and cloud platforms.
• Ensure security, vulnerability management, hardening, logging and monitoring
• requirements are incorporated into reference architectures and solution designs.
• Work closely with Information and Cyber Security to ensure platform architectures
• align with security policies, standards and risk requirements.
• Define architecture principles and patterns for availability, resilience, backup,
• recovery and disaster recovery.
• Define appropriate resilience and redundancy patterns for critical cloud and hybrid
• platforms.

Key Skills & Experience:

• * CCSP, CISSP, or equivalent industry-recognised cloud/security certification.
• * Strong knowledge of Microsoft Azure architecture across networking, identity,
• security, compute, storage, monitoring and governance.
• * Strong knowledge of Azure landing zones, Management Groups, Azure Policy,
• RBAC, PIM and cloud governance.
• * Strong enterprise networking and security knowledge, including routing,
• segmentation, firewalls, VPNs and private connectivity.
• * Advanced knowledge of Active Directory, Entra ID, Conditional Access, MFA,
• PIM, SSO, certificates and authentication technologies.
• * Strong understanding of Microsoft Defender, Sentinel, Zero Trust and cloud
• security architecture.
• * Strong understanding of hybrid infrastructure, resilience, backup and disaster
• recovery architecture.
• * Good practical understanding of Infrastructure as Code, including Terraform,
• Azure DevOps and automated cloud deployment.
• * Understanding of AI-enabled technologies and associated architecture and
• security considerations.
• * Strong knowledge of architecture governance, design assurance, reference
• architectures and technical standards.
• * Extensive experience designing and assuring cloud platform, security and hybrid
• infrastructure architectures in complex enterprise environments.
• * Proven experience in a senior architecture role, with strong expertise in Microsoft
• Azure, networking, identity, governance, resilience and platform security.
• * Experience developing target-state architectures, reference architectures,
• standards and reusable architectural patterns.
• * Experience providing architecture assurance through design-authority or
• architecture-governance processes.
• * Experience supporting cloud migration, modernisation, re-platforming and
• technology transformation initiatives.
• * Experience identifying and managing architectural risk, technical debt, lifecycle
• and obsolescence.
• * Experience with Infrastructure as Code and automated cloud deployment,
• including Terraform and Azure DevOps.
• * Experience assessing AI-enabled technologies from an architecture and security
• perspective.

LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance.

A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.

Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.