Multi Cloud Architect

Tata Consultancy Services Limited; Rosemead (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Discretionary annual incentive

Comprehensive medical coverage

401K plan

Job summary

Tata Consultancy Services Limited is seeking a Cloud Architect to lead multi-cloud strategy, design scalable and secure architecture, and govern cloud deployments across AWS, Azure, and GCP. You will drive landing zones, IAM, and policy guardrails while collaborating with security and operations teams.

The role emphasizes IaC automation, cost governance, and reliable delivery in a fast-paced enterprise environment, based in Rosemead, CA.

Qualifications

• Experience with multi-cloud platforms (AWS, Azure, GCP) and hybrid-cloud design.
• Ability to design landing zones, IAM, policy guardrails, and cost governance.
• Proficiency in IaC and automation with Terraform, CloudFormation, or equivalent.

Responsibilities

• Translate business objectives into a practical multi-cloud strategy and roadmap.
• Lead architecture reviews, governance boards, and technical decision forums.
• Collaborate with security, network, and platform teams to deliver compliant solutions.

Skills

Multi-cloud

Cloud architecture

Governance

Terraform

CI/CD

Education

Bachelors in CS or related

Tools

Docker

Kubernetes

GitHub Actions

CloudFormation

Job description

• Multi-cloud platforms: Strong hands-on knowledge of AWS, Microsoft Azure, and Google Cloud Platform across IaaS, PaaS, SaaS, and container services.
• Architecture and design: Design scalable, secure, resilient, highly available, and cost-effective multi-cloud and hybrid-cloud solutions using well-architected principles.
• Cloud foundation and governance: Design landing zones, account/subscription/project hierarchies, identity models, tagging standards, policy guardrails, resource organization, and cloud operating models.
• Compute, storage, and databases: Experience with virtual machines, autoscaling, load balancers, object/block/file storage, relational and NoSQL databases, serverless services, and managed platform services.
• Networking: Strong knowledge of VPC/VNet design, routing, DNS, firewalls, NAT, private endpoints, load balancing, transit connectivity, VPN, AWS Direct Connect, Azure ExpressRoute, and Google Cloud Interconnect.
• Security and compliance: Identity and access management, RBAC, least privilege, secrets and key management, encryption, zero-trust controls, vulnerability management, security monitoring, and compliance with CIS, NIST, FedRAMP, and applicable regulatory standards.
• Containers and orchestration: Docker and Kubernetes, including EKS, AKS, and GKE; container registries, Helm, ingress, service scaling, security, and cluster operations.
• Infrastructure as Code and automation: Terraform, CloudFormation, Bicep/ARM, Ansible, cloud CLIs, PowerShell, Python, and automated provisioning through reusable modules and pipelines.
• DevOps and DevSecOps: CI/CD design using GitHub Actions, GitLab, Jenkins, Azure DevOps, AWS native tools, and Google Cloud build/deployment services; integrate code quality, security scanning, approvals, and policy checks.
• Migration and modernization: Assess application dependencies, define 6R/7R migration strategies, plan migration waves, execute cutover and rollback, and modernize workloads using containers, microservices, serverless, and managed services.
• Observability and operations: Centralized logging, metrics, tracing, dashboards, alerting, event management, service health monitoring, SLI/SLO practices, incident response, problem management, and root-cause analysis.
• Reliability and disaster recovery: Define RTO/RPO, backup and retention, multi-zone/multi-region patterns, failover, recovery testing, business continuity, and chaos/resilience validation.
• FinOps: Cost allocation, budgets, forecasts, anomaly detection, rightsizing, scheduling, storage optimization, commitment discounts, reserved capacity, Savings Plans, showback/chargeback, TCO, and ROI analysis.
• Data and integration: Experience with APIs, messaging, event-driven architecture, data migration, integration services, data lakes, analytics platforms, and cross-cloud data movement.
• Documentation and troubleshooting: Produce HLD, LLD, architecture diagrams, standards, SOPs, runbooks, implementation plans, and operati onal handover documents; troubleshoot complex hybrid and multi-cloud incidents.

GCP Architect Skills

• Solution Design and Architecture Governance
• Multi-Region & High Availability Architecture
• Disaster Recovery (DR) & Business Continuity
• GCP Core Services: Compute Engine, App Engine, Cloud Run, GKE, Cloud Functions, and VMware Engine.
• GCP Cloud Architecture: Design highly available, scalable, fault-tolerant, resilient, and cost-optimized solutions.
• GCP Networking: VPC, subnets, Shared VPC, firewall rules, Cloud NAT, Cloud DNS, load balancing, VPN, Interconnect, and Network Connectivity Center.
• Identity and Security: IAM, organization policies, service accounts, Cloud KMS, Secret Manager, Security Command Center, Cloud Armor, and BeyondCorp Enterprise.
• Containers and Kubernetes: GKE architecture, cluster operations, autoscaling, service mesh, container security, and Artifact Registry.
• Storage and Databases: Cloud Storage, Persistent Disk, Filestore, Cloud SQL, AlloyDB, Spanner, Firestore, Bigtable, and Memorystore.
• Data and Analytics: BigQuery, Dataflow, Dataproc, Pub/Sub, Cloud Composer, Dataplex, and Looker.
• Migration and Modernization: Migration Center, Migrate to Virtual Machines, Database Migration Service, application assessment, landing zones, and cloud-native modernization.
• DevOps and Automation: Terraform, Infrastructure as Code, Cloud Build, Cloud Deploy, GitOps, CI/CD pipelines, and policy automation.
• Disaster Recovery: Backup and DR, regional and multi-regional designs, recovery strategies, and RTO/RPO planning.
• FinOps and Governance: Billing accounts, budgets, quotas, resource hierarchy, labels, cost allocation, optimization, compliance, and guardrails.
• AI and Machine Learning: Vertex AI, Gemini on Google Cloud, model deployment, MLOps, responsible AI, and AI security.
• Architecture Documentation: High-level and low-level designs, reference architectures, decision records, migration roadmaps, risk registers, and operational runbooks.
• Frameworks and Standards: Google Cloud Architecture Framework, Well-Architected principles, SRE, DevSecOps, data governance, privacy, and regulatory compliance.

Functional Skills

• Translate business objectives and non-functional requirements into a practical multi-cloud strategy, target architecture, and phased roadmap.
• Conduct current-state assessments, application portfolio analysis, dependency mapping, cloud suitability reviews, and gap assessments.
• Recommend the appropriate cloud provider and services based on workload characteristics, security, compliance, performance, resiliency, data residency, portability, and cost.
• Facilitate architecture workshops, discovery sessions, design reviews, governance boards, and technical decision forums.
• Develop business cases, TCO/ROI models, estimates, migration plans, solution options, risks, assumptions, dependencies, and decision records.
• Define cloud governance, service ownership, support models, escalation paths, operational readiness criteria, and handover requirements.
• Collaborate effectively with application, data, security, network, infrastructure, DevOps, operations, finance, procurement, and vendor teams.
• Manage cloud risks, technical debt, compliance actions, architecture exceptions, and cross-platform dependencies through closure.
• Support vendor evaluation, licensing and commercial analysis, service comparison, contract discussions, and avoidance of unnecessary vendor lock-in.
• Present architecture, cost, risk, and transformation recommendations clearly to technical teams, customers, and executive stakeholders.
• Provide technical leadership, mentoring, standards, reusable patterns, best practices, and quality assurance across delivery teams.
• Work within Agile, DevOps, ITIL, and project governance models while maintaining delivery quality, schedule, scope, and stakeholder alignment.

Salary Range: $120,000 - $150,000 a year

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.