IT Architect | Heathrow, FL - USA (Office)

Cohesity Inc.; Heathrow (FL); On-site; USD 141,440 - 176,800; Full time

Benefits offered by this job

Healthcare coverage

Parental leave

Flexible PTO

Wellness program

Continuous learning

Competitive salary

Job summary

Cohesity Inc. is seeking a senior IT Architect to own the AWS architecture across a hybrid infrastructure in Heathrow, FL. This role covers landing zones, cost governance, and multi‑account design to support product engineering and QA teams.

You will drive IaC adoption with Terraform and Ansible, shape cloud patterns, and mentor senior engineers while partnering with security and IT ops. This is a strategic IC role with broad influence.

Qualifications

• 8+ years in IT infrastructure or cloud architecture roles, with at least 4 years on AWS.
• Deep hands-on AWS: VPC, EC2, S3, RDS, EKS, Lambda, IAM, Organizations, Control Tower, Transit Gateway, Direct Connect.
• Experience designing multi-account AWS environments at enterprise scale.
• Strong IaC experience with Terraform and Ansible.
• Experience architecting large virtualization environments with multi-tenant isolation.
• Strong FinOps cost management and cloud cost governance.
• Identity and access management architecture including Entra ID, SSO/SAML/OIDC.
• Strong communication skills to translate decisions to engineers and executives.

Responsibilities

• Own the architecture of Cohesity’s AWS environment and multi-account setups.
• Define guardrails across compute, storage, networking, and serverless services.
• Lead FinOps and cloud cost governance frameworks.
• Drive IaC adoption with Terraform and Ansible.
• Design hybrid cloud connectivity and on‑prem to cloud integration.
• Mentor IC3/IC4 engineers and provide architectural reviews.

Skills

AWS cloud architecture

Multi-account design

Cloud cost governance

Leadership & communication

Hybrid cloud design

Tools

Terraform

Ansible

Kubernetes

Entra ID / SSO / OIDC

ServiceNow CMDB

Job description

Cohesity is a leader in AI‑powered data security and management, helping organizations protect, manage, and derive value from data across the data center, edge, and cloud. Our solutions defend against cyber threats with immutable backup snapshots, AI‑based threat detection, and rapid recovery at scale.

About the Role

The IT Architect will join the Core Platform & Lab Services (CPLS) organization in Heathrow, FL. This senior individual‑contributor role owns AWS cloud architecture and has broad responsibility across Cohesity’s hybrid infrastructure, including the physical lab environment that enables product engineering and QA teams.

What You Will Do

AWS & Cloud Architecture

• Own the architecture of Cohesity’s AWS environment, including landing zones, account structure, network topology, IAM, and cost governance.
• Define and maintain cloud architecture standards and guardrails across compute, storage, networking, containers, and serverless services.
• Architect multi‑account AWS environments using AWS Organizations, Control Tower, and Service Control Policies.
• Design and govern cloud‑native and hybrid connectivity patterns including Direct Connect, Transit Gateway, VPC peering, and PrivateLink.
• Lead FinOps architecture: define tagging standards, cost allocation models, Reserved Instance and Savings Plan strategies, and cloud cost governance frameworks.
• Drive infrastructure‑as‑code adoption using Terraform and Ansible across the AWS environment; define IaC standards and module patterns for engineering teams.
• Evaluate and recommend AWS services and architectural patterns; produce documented trade‑off analyses with clear recommendations.

Engineering Lab Infrastructure Architecture

• Own the architecture of Cohesity’s three physical engineering lab facilities, supporting over 50,000 VMs and 10,000 hardware devices used by product engineering and QA teams.
• Design virtualization, compute, storage, and networking architecture for lab environments at scale, including resource pooling, tenant isolation, and capacity management.
• Architect hardware lifecycle and bare‑metal provisioning workflows; define automation frameworks for VM provisioning, environment management, and self‑service infrastructure consumption.
• Define observability and resiliency architecture for lab environments; ensure availability and performance meet internal product engineering needs.

Hybrid Infrastructure Architecture

• Architect hybrid infrastructure solutions spanning on‑premises data centers, AWS, and other hyperscalers.
• Define integration patterns and connectivity standards between on‑premises environments and cloud, including identity federation and network segmentation.
• Design compute, storage, and networking architectures for enterprise workloads across hybrid environments.
• Architect disaster recovery and resiliency patterns; define RTO/RPO requirements and validate through design.
• Maintain service dependency models in CMDB to support impact analysis and incident response.

AI Infrastructure Architecture

• Own the infrastructure architecture for Cohesity’s internal AI foundry platform: GPU and accelerator compute environments, multi‑tenant model serving infrastructure, and AI data pipeline architecture.
• Design AI agent orchestration infrastructure: tool‑use patterns, multi‑agent system topology, and MCP/API integration patterns that are safe and governable at enterprise scale.
• Architect the AI API gateway layer: model routing, rate limiting, cost allocation, audit logging, and controls that prevent ungoverned shadow AI consumption.
• Define the observability architecture for AI workloads as a separate layer from traditional infrastructure monitoring, covering model drift detection, quality monitoring, and prompt/response logging for compliance pipelines.
• Architect AI‑specific security controls: IAM and zero‑trust patterns extended to AI workloads, LLM‑specific attack surface coverage including prompt injection, data exfiltration via model output, and supply chain risks.
• Partner with enterprise technology teams on application and model layer architecture to ensure infrastructure supports their roadmap without constraints.

Platform & Enterprise Services Architecture

• Contribute to CMDB governance and CI lifecycle architecture; define and maintain service dependency and data model standards.
• Architect Kubernetes‑based platform services; define container orchestration standards, Helm patterns, and GitOps workflows.

Integration & Data Architecture

• Design integration patterns between enterprise SaaS platforms, internal systems, and AWS‑hosted services.
• Define API governance standards, event‑driven integration patterns, and data flow architecture.
• Ensure data architecture aligns with IT governance, CMDB, and asset management requirements.

Standards, Governance & Roadmap

• Co‑own the CPLS technology roadmap with IT leadership; translate architectural direction into prioritized initiatives with clear business rationale.
• Own Architecture Decision Records (ADRs) for significant design choices; document context, options, decision, and consequences.
• Define and maintain reference architectures and architecture standards for assigned domains.
• Participate in architecture review and provide design approval for initiatives within the domain.
• Reduce architectural fragmentation by championing reusable, documented patterns over bespoke implementations.
• Produce curated, opinionated technology guidance for the CPLS team: translate emerging technology into clear assessments of its impact on our architecture and recommended actions.

Cross‑Functional Leadership & Mentorship

• Partner with IT engineering, operations, network, security, and service management teams to ensure architectures are viable, secure, and operable.
• Communicate architectural decisions clearly to both technical peers and non‑technical stakeholders, including IT leadership.
• Mentor IC3/IC4 engineers; provide design guidance and architectural review for complex implementations.
• Contribute to the technical growth of the broader IT team through documentation, design reviews, and knowledge sharing.

What You Bring

Required

• 8+ years of experience in IT infrastructure or cloud architecture roles, with at least 4 years focused on AWS.
• Deep hands‑on AWS expertise: VPC, EC2, S3, RDS, EKS, Lambda, IAM, Organizations, Control Tower, Transit Gateway, Direct Connect, and related services.
• Experience designing and governing multi‑account AWS environments at enterprise scale.
• Strong proficiency in infrastructure‑as‑code, specifically Terraform; experience with Ansible or equivalent.
• Experience architecting large‑scale virtualization environments; familiarity with VM lifecycle management, resource scheduling, and multi‑tenant isolation at scale.
• Experience architecting hybrid cloud environments connecting on‑premises infrastructure to AWS.
• Proficiency in cloud cost management: tagging strategies, cost allocation, Reserved Instance planning, and FinOps frameworks.
• Experience with identity and access management architecture including Entra ID, SSO/SAML/OIDC, RBAC, and zero‑trust network access.
• Strong understanding of network architecture: routing, DNS, firewalls, load balancing, and hybrid connectivity patterns.
• Experience producing architecture documentation including high‑level designs, reference architectures, and ADRs.
• Demonstrated ability to influence technical direction across teams without direct authority.
• Strong communication skills: able to translate complex architectural decisions for both engineering and executive audiences.

Preferred

• AWS Solutions Architect Professional certification or equivalent demonstrated expertise.
• Experience architecting physical datacenter or lab environments at significant scale (thousands of physical devices or tens of thousands of VMs).
• Experience with bare‑metal provisioning frameworks and hardware lifecycle automation.
• Experience with Kubernetes and container platform architecture (EKS, Helm, GitOps).
• Experience architecting AI/ML infrastructure including GPU compute environments, model serving platforms, and AI API gateway patterns.
• Familiarity with AI agent frameworks, multi‑agent orchestration patterns, or MCP/tool‑use integration architectures.
• Understanding of LLM‑specific security risks including prompt injection, model output exfiltration, and AI supply chain threats.
• Familiarity with AI observability concepts: model drift detection, quality monitoring, and prompt/response logging for compliance pipelines.
• Familiarity with observability platforms such as Dynatrace or equivalent APM/monitoring tools.
• Experience with ServiceNow CMDB and IT asset management architecture.
• Familiarity with enterprise integration and iPaaS platforms (Workato, MuleSoft, or equivalent).
• Experience in a high‑growth technology company or similarly fast‑paced enterprise IT environment.

Who Thrives in This Role

• Think in systems, not just components – naturally consider second‑order effects and cross‑domain dependencies.
• Make architectural decisions on rapidly evolving technology, revising direction without ego as the landscape shifts.
• Write decisions down: understand that undocumented architecture is architecture that will be re‑litigated in six months.
• Take operational reality seriously: design solutions that can be built, operated, and supported.
• Hold a point of view on technology and share it: translate emerging trends into clear, opinionated guidance and recommend actions.
• Collaborate and teach: energize engineers to do better work, not monopolize knowledge.
• Hold a high bar without being a blocker: make architecture review a force multiplier, not a bottleneck.
• Will not consider the role if seeking primarily hands‑on implementation work.

Benefits

• Healthcare coverage for you and your family
• Paid parental leave
• Flexible paid time off
• Additional company‑wide days off throughout the year
• A robust wellness program
• Continuous learning opportunities
• Competitive salary and additional benefits package

Pay Range

$141,440.00–$176,800.00 (annualized hourly rate assuming normal full‑time employment).

Equal Employment Opportunity

Cohesity is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law.