Senior Cloud Platform Architect (GCP/Azure) - Hybird

Conexess Group; Milpitas (CA); Sur place; USD 150 000 - 210 000; Plein temps

Résumé du poste

Conexess Group is seeking a Sr. Cloud Platform Architect to design, implement, secure, and govern cloud solutions across AWS, Azure, and GCP. You will drive security by design, IAM, and zero-trust principles while aligning with governance and FinOps.

You will lead modernization initiatives, define cloud-native reference architectures and guardrails, and collaborate with engineering, platform, and security teams to advance scalable, cost-efficient, and compliant cloud environments.

Qualifications

• Bachelor’s degree in CS/CE or related field with eight years of experience.
• Seven years of hands-on cloud architecture or engineering experience.
• Proficient in Azure, AWS, or GCP with cross-cloud security fundamentals.
• Strong understanding of cloud networking, containers, Kubernetes, serverless, and microservices.
• Experience with IAM, encryption, key management, and zero-trust principles.
• Knowledge of governance, FinOps, cost management, and compliance standards.
• Experience embedding security into architecture, IaC, and CI/CD pipelines (DevSecOps).

Responsabilités

• Design and architect scalable, secure cloud solutions across AWS, Azure, and Google Cloud Platform (GCP).
• Lead cloud migration initiatives with security posture improvement.
• Drive modernization to improve scalability, performance, security, and efficiency.
• Define cloud-native reference architectures, guardrails, and roadmaps with engineering and security teams.
• Optimize cloud infrastructure for performance, availability, security, and cost.
• Establish and govern cloud security architectures and policies.
• Design identity-first security including IAM and least-privilege access.
• Design secure cloud networking including VPN, Direct Connect, ExpressRoute, Cloud Interconnect.
• Enforce network segmentation and zero-trust architectures.
• Secure containers, Kubernetes, serverless, and microservices with scanning and policy enforcement.
• Implement IaC with Terraform, CloudFormation, and ARM/Bicep templates with built-in security.
• Evolve DevSecOps CI/CD pipelines with security scanning and compliance.
• Define cloud security observability: logging, monitoring, alerting, and incident response.
• Evaluate emerging cloud security technologies and drive improvements.
• Develop architecture diagrams, security models, roadmaps, and exec presentations.
• Define and operate cloud operating models including FinOps and tagging standards.

Connaissances

Cloud architecture

Security by design

IAM

Networking

DevSecOps

Terraform

CloudFormation

Kubernetes

Zero-trust

Cross-cloud security

Formation

Bachelor’s in CS/CE

Outils

Terraform

AWS CloudFormation

Azure ARM/Bicep

Description du poste

The Sr. Cloud Platform Architect will be responsible for designing, implementing, securing, and governing cloud based solutions across multiple cloud platforms, including AWS, Microsoft Azure, and Google Cloud Platform (GCP). This role requires a strong understanding of cloud security architecture, identity and access management, networking, and secure by design architecture principles, in addition to IaaS and PaaS best practices.

Responsibilities:

• Design and architect scalable, highly available, resilient, and secure cloud solutions leveraging IaaS and PaaS services across AWS, Azure, and Google Cloud Platform (GCP).
• Lead cloud migration initiatives, including re‑hosting, re‑platforming, refactoring, and re‑architecting legacy and on‑premises workloads with a strong emphasis on security posture improvement and risk reduction.
• Drive application and infrastructure modernization programs to improve scalability, performance, security, and operational efficiency.
• Partner with engineering, platform, and security teams to define cloud‑native reference architectures, security guardrails, and modernization roadmaps.
• Optimize cloud infrastructure for performance, availability, reliability, security hardening, and cost efficiency.
• Establish and manage cloud security architectures and governance frameworks, aligned with industry standards and internal security policies.
• Design and enforce identity‑first security, including IAM strategies, least‑privilege access controls, role‑based access, identity federation, and secrets management.
• Design and implement secure cloud networking architectures, including VPN, Direct Connect, ExpressRoute, and Cloud Interconnect.
• Configure and enforce network segmentation, micro‑segmentation, zero‑trust architectures, and advanced network security controls.
• Secure containers, Kubernetes, serverless, and microservices environments, including image scanning, runtime protection, and policy enforcement.
• Implement Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, and Azure ARM/Bicep templates with built‑in security, policy, and compliance controls.
• Design and evolve DevSecOps CI/CD pipelines, integrating security scanning, policy enforcement, and automated compliance validation.
• Define and implement cloud security observability, including logging, monitoring, alerting, and incident response integration.
• Evaluate emerging cloud and security technologies, driving continuous improvement of platform security and resilience.
• Develop, document, and present architecture diagrams, security models, threat assessments, technical documentation, roadmaps, and executive‑level presentations.
• Define and operate cloud operating models, including security governance, FinOps, tagging standards, resource governance, and operational excellence frameworks

Minimum Qualifications

• Bachelor’s level degree in Computer Science, Computer Engineering or related field with eight (8) years of related experience.
• Seven (7) years of hands‑on cloud architecture or engineering experience, including ownership of secure production environments.
• Proficient in at least one major cloud platform such as Microsoft Azure, AWS, or GCP, with strong cross‑cloud security fundamentals.
• In‑depth understanding of cloud networking, cloud security, containers, Kubernetes, serverless technologies, and microservices.
• Confirmed experience with cloud security controls, including IAM, encryption, key management, network security, and zero‑trust principles.
• Extensive knowledge of cloud governance, monitoring, observability, FinOps, and cost management.
• Strong understanding of compliance and regulatory frameworks (e.g., NIST, ISO, SOC, CIS, PCI, or similar).
• Experience embedding security into architecture design, IaC, and CI/CD pipelines (DevSecOps).
• Exceptional communication, leadership, and customer‑management skills, with the ability to influence engineering, security, and executive stakeholders.