Multi Cloud Architect

Tata Consultancy Services; Rosemead (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Parental Leaves

401K Plan

Certification & Training Reimbursement

Vacation & Holidays

Job summary

Tata Consultancy Services is seeking a Cloud Architect in the United States (California/Rosemead area) to design and implement multi-cloud and hybrid-cloud solutions. You will apply well-architected principles to ensure scalable, secure, and cost-efficient platforms across AWS, Azure, and GCP.

The role emphasizes cloud foundation, governance, networking, security, and modernization, with a focus on migration, observability, and incident response.

Qualifications

• Experience designing multi-cloud and hybrid-cloud solutions using well-architected principles.
• Hands-on knowledge of cloud platforms (AWS, Azure, GCP) across IaaS, PaaS, SaaS and containers.
• Strong identity, access management, and security controls with regulatory compliance.
• Proficiency in IaC tools and automation pipelines for provisioning and governance.
• Ability to design landing zones, cost-effective architectures, and policy guardrails.
• Familiarity with VPC/VNet design, networking, and DR/BC planning.
• Experience with migration strategies and modernization of workloads.
• Ability to produce architecture diagrams, runbooks, and handover documents.

Skills

Multi-cloud platforms

Architecture design

Cloud governance

Compute & storage

Networking

Security & compliance

Containers & orchestration

Infrastructure as Code

DevOps & DevSecOps

Migration & modernization

Observability & operations

Reliability & disaster recovery

FinOps

Data & integration

Documentation & troubleshooting

Education

Bachelor of Engineering

Tools

AWS

Azure

GCP

Docker

Kubernetes

EKS

AKS

GKE

Terraform

CloudFormation

Bicep/ARM

Ansible

GitHub Actions

Jenkins

Azure DevOps

GCP Build/Deploy

Datadog/Prometheus

Looker/BigQuery

Job description

• Multi-cloud platforms: Strong hands-on knowledge of AWS, Microsoft Azure, and Google Cloud Platform across IaaS, PaaS, SaaS, and container services.
• Architecture and design: Design scalable, secure, resilient, highly available, and cost-effective multi-cloud and hybrid-cloud solutions using well-architected principles.
• Cloud foundation and governance: Design landing zones, account/subscription/project hierarchies, identity models, tagging standards, policy guardrails, resource organization, and cloud operating models.
• Compute, storage, and databases: Experience with virtual machines, autoscaling, load balancers, object/block/file storage, relational and NoSQL databases, serverless services, and managed platform services.
• Networking: Strong knowledge of VPC/VNet design, routing, DNS, firewalls, NAT, private endpoints, load balancing, transit connectivity, VPN, AWS Direct Connect, Azure ExpressRoute, and Google Cloud Interconnect.
• Security and compliance: Identity and access management, RBAC, least privilege, secrets and key management, encryption, zero-trust controls, vulnerability management, security monitoring, and compliance with CIS, NIST, FedRAMP, and applicable regulatory standards.
• Containers and orchestration: Docker and Kubernetes, including EKS, AKS, and GKE; container registries, Helm, ingress, service scaling, security, and cluster operations.
• Infrastructure as Code and automation: Terraform, CloudFormation, Bicep/ARM, Ansible, cloud CLIs, PowerShell, Python, and automated provisioning through reusable modules and pipelines.
• DevOps and DevSecOps: CI/CD design using GitHub Actions, GitLab, Jenkins, Azure DevOps, AWS native tools, and Google Cloud build/deployment services; integrate code quality, security scanning, approvals, and policy checks.
• Migration and modernization: Assess application dependencies, define 6R/7R migration strategies, plan migration waves, execute cutover and rollback, and modernize workloads using containers, microservices, serverless, and managed services.
• Observability and operations: Centralized logging, metrics, tracing, dashboards, alerting, event management, service health monitoring, SLI/SLO practices, incident response, problem management, and root-cause analysis.
• Reliability and disaster recovery: Define RTO/RPO, backup and retention, multi-zone/multi-region patterns, failover, recovery testing, business continuity, and chaos/resilience validation.
• FinOps: Cost allocation, budgets, forecasts, anomaly detection, rightsizing, scheduling, storage optimization, commitment discounts, reserved capacity, Savings Plans, showback/chargeback, TCO, and ROI analysis.
• Data and integration: Experience with APIs, messaging, event-driven architecture, data migration, integration services, data lakes, analytics platforms, and cross-cloud data movement.
• Documentation and troubleshooting: Produce HLD, LLD, architecture diagrams, standards, SOPs, runbooks, implementation plans, and operati onal handover documents; troubleshoot complex hybrid and multi-cloud incidents.

Job Description

Multi Cloud Architect Skills

• Multi-cloud platforms: Strong hands-on knowledge of AWS, Microsoft Azure, and Google Cloud Platform across IaaS, PaaS, SaaS, and container services.
• Architecture and design: Design scalable, secure, resilient, highly available, and cost-effective multi-cloud and hybrid-cloud solutions using well-architected principles.
• Cloud foundation and governance: Design landing zones, account/subscription/project hierarchies, identity models, tagging standards, policy guardrails, resource organization, and cloud operating models.
• Compute, storage, and databases: Experience with virtual machines, autoscaling, load balancers, object/block/file storage, relational and NoSQL databases, serverless services, and managed platform services.
• Networking: Strong knowledge of VPC/VNet design, routing, DNS, firewalls, NAT, private endpoints, load balancing, transit connectivity, VPN, AWS Direct Connect, Azure ExpressRoute, and Google Cloud Interconnect.
• Security and compliance: Identity and access management, RBAC, least privilege, secrets and key management, encryption, zero-trust controls, vulnerability management, security monitoring, and compliance with CIS, NIST, FedRAMP, and applicable regulatory standards.
• Containers and orchestration: Docker and Kubernetes, including EKS, AKS, and GKE; container registries, Helm, ingress, service scaling, security, and cluster operations.
• Infrastructure as Code and automation: Terraform, CloudFormation, Bicep/ARM, Ansible, cloud CLIs, PowerShell, Python, and automated provisioning through reusable modules and pipelines.
• DevOps and DevSecOps: CI/CD design using GitHub Actions, GitLab, Jenkins, Azure DevOps, AWS native tools, and Google Cloud build/deployment services; integrate code quality, security scanning, approvals, and policy checks.
• Migration and modernization: Assess application dependencies, define 6R/7R migration strategies, plan migration waves, execute cutover and rollback, and modernize workloads using containers, microservices, serverless, and managed services.
• Observability and operations: Centralized logging, metrics, tracing, dashboards, alerting, event management, service health monitoring, SLI/SLO practices, incident response, problem management, and root-cause analysis.
• Reliability and disaster recovery: Define RTO/RPO, backup and retention, multi-zone/multi-region patterns, failover, recovery testing, business continuity, and chaos/resilience validation.
• FinOps: Cost allocation, budgets, forecasts, anomaly detection, rightsizing, scheduling, storage optimization, commitment discounts, reserved capacity, Savings Plans, showback/chargeback, TCO, and ROI analysis.
• Data and integration: Experience with APIs, messaging, event-driven architecture, data migration, integration services, data lakes, analytics platforms, and cross-cloud data movement.
• Documentation and troubleshooting: Produce HLD, LLD, architecture diagrams, standards, SOPs, runbooks, implementation plans, and operati onal handover documents; troubleshoot complex hybrid and multi-cloud incidents.

GCP Architect Skills

• Google Cloud Architecture & Design
• Solution Design and Architecture Governance
• Multi-Region & High Availability Architecture
• Disaster Recovery (DR) & Business Continuity
• Hybrid Cloud & Multi-Cloud Architecture
• Cloud Landing Zone Design
• Cloud Migration & Modernization Strategies
• GCP Core Services: Compute Engine, App Engine, Cloud Run, GKE, Cloud Functions, and VMware Engine.
• GCP Cloud Architecture: Design highly available, scalable, fault-tolerant, resilient, and cost-optimized solutions.
• GCP Networking: VPC, subnets, Shared VPC, firewall rules, Cloud NAT, Cloud DNS, load balancing, VPN, Interconnect, and Network Connectivity Center.
• Identity and Security: IAM, organization policies, service accounts, Cloud KMS, Secret Manager, Security Command Center, Cloud Armor, and BeyondCorp Enterprise.
• Containers and Kubernetes: GKE architecture, cluster operations, autoscaling, service mesh, container security, and Artifact Registry.
• Storage and Databases: Cloud Storage, Persistent Disk, Filestore, Cloud SQL, AlloyDB, Spanner, Firestore, Bigtable, and Memorystore.
• Data and Analytics: BigQuery, Dataflow, Dataproc, Pub/Sub, Cloud Composer, Dataplex, and Looker.
• Migration and Modernization: Migration Center, Migrate to Virtual Machines, Database Migration Service, application assessment, landing zones, and cloud-native modernization.
• DevOps and Automation: Terraform, Infrastructure as Code, Cloud Build, Cloud Deploy, GitOps, CI/CD pipelines, and policy automation.
• Disaster Recovery: Backup and DR, regional and multi-regional designs, recovery strategies, and RTO/RPO planning.
• FinOps and Governance: Billing accounts, budgets, quotas, resource hierarchy, labels, cost allocation, optimization, compliance, and guardrails.
• AI and Machine Learning: Vertex AI, Gemini on Google Cloud, model deployment, MLOps, responsible AI, and AI security.
• Architecture Documentation: High-level and low-level designs, reference architectures, decision records, migration roadmaps, risk registers, and operational runbooks.
• Frameworks and Standards: Google Cloud Architecture Framework, Well-Architected principles, SRE, DevSecOps, data governance, privacy, and regulatory compliance.

Functional Skills

• Translate business objectives and non-functional requirements into a practical multi-cloud strategy, target architecture, and phased roadmap.
• Conduct current-state assessments, application portfolio analysis, dependency mapping, cloud suitability reviews, and gap assessments.
• Recommend the appropriate cloud provider and services based on workload characteristics, security, compliance, performance, resiliency, data residency, portability, and cost.
• Facilitate architecture workshops, discovery sessions, design reviews, governance boards, and technical decision forums.
• Develop business cases, TCO/ROI models, estimates, migration plans, solution options, risks, assumptions, dependencies, and decision records.
• Define cloud governance, service ownership, support models, escalation paths, operational readiness criteria, and handover requirements.
• Collaborate effectively with application, data, security, network, infrastructure, DevOps, operations, finance, procurement, and vendor teams.
• Manage cloud risks, technical debt, compliance actions, architecture exceptions, and cross-platform dependencies through closure.
• Support vendor evaluation, licensing and commercial analysis, service comparison, contract discussions, and avoidance of unnecessary vendor lock-in.
• Present architecture, cost, risk, and transformation recommendations clearly to technical teams, customers, and executive stakeholders.
• Provide technical leadership, mentoring, standards, reusable patterns, best practices, and quality assurance across delivery teams.
• Work within Agile, DevOps, ITIL, and project governance models while maintaining delivery quality, schedule, scope, and stakeholder alignment.

Salary Range: $120,000 - $150,000 a year

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & amp; Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Qualifications: BACHELOR OF ENGINEERING