Vice President of Cloud Architecture Engineering

iCapital; New York (NY); Presencial; USD 180.000 - 240.000; Tempo integral

Resumo da vaga

iCapital is seeking a senior Cloud Architect to own the design and operation of our core compute, network, and edge infrastructure in a fast‑paced environment. You will work with application and platform teams to onboard services, establish connectivity, and optimize traffic patterns across multiple environments.

The role emphasizes deep AWS and Kubernetes expertise, with hands‑on implementation of scalable cloud architectures and strong communication to both technical and non‑technical

Qualificações

• Strong cloud architecture with AWS and Kubernetes.

Responsabilidades

• Design and operate cloud architecture for core compute, network, and edge infrastructure.
• Onboard services and establish connectivity, troubleshooting traffic flows across environments.
• Manage Transit Gateway, Network Firewall, and external connectivity.
• Produce reference architectures, design documents, and guardrails for platform standards.
• Collaborate with engineering, security, and product teams to ensure practical, widely adopted platform standards.

Conhecimentos

AWS

Kubernetes

Networking

Cloud architecture

EKS

Bottlerocket

Karpenter

Auto-scaling

API Gateways

Kong

Python

Ferramentas

Akamai

Cloudflare

Transit Gateway

Descrição da vaga

• The ideal candidate for this role is a strong cloud architect who excels at both big-picture thinking as well as hands-on technical work. With very strong AWS, Kubernetes and web infrastructure skillsets, they will be working on projects building or improving our core compute, core network and edge infrastructure. They also play a critical role in helping the iCapital platform scale and doing so with an automation-first mentality
• The engineer will work with application and platform teams to onboard services, establish connectivity, troubleshoot traffic flows, and maintain consistent networking patterns across environments
• Design and continually improve Kubernetes architecture, also helping operationally manage cluster lifecycle
• Work on projects integrating new self-hosted and SaaS services, in some cases understanding and working with developers to help design software architecture
• Manage Transit Gateway, Network Firewall and external connectivity. Own architectural guidance for edge and traffic management, including CDN, DNS, and TLS strategies (e.g., Akamai, Cloudflare)
• Produce and maintain reference architectures, design documents, and architectural guardrails
• Partner with engineering, security, and product teams to ensure platform standards are practical, well understood, and broadly adopted

The ideal candidate for this role is a strong cloud architect who excels at both big-picture thinking as well as hands-on technical workComfortable operating as a senior individual contributor with influence across multiple teams as a leaderSome experience with EKS standards such as Bottlerocket, Karpenter, and Auto-modeCertifications (AWS/Kubernetes) are a plus but not requiredA software engineering background is helpful, and some experience with Python is expectedDeep understanding of AWS infrastructure, including networking, security primitives, and managed servicesExpertise in cloud networking architecture patterns, including VPC design, routing, and planning for scaleStrong understanding of application design principlesExperience directly managing Akamai in a production environmentStrong hands-on experience designing and operating Kubernetes platforms in production environments, including a strong understanding of autoscaling strategies, node provisioning, and security on EKSVery strong written and verbal communication skills, with the ability to explain architectural decisions to both technical and nontechnical audiencesExpertise in Kong or other API Gateways at a deep level8+ years of experience in platform, cloud, or infrastructure engineering roles, with demonstrated architectural responsibilityStrong understanding of ingress/egress, TGW design, and private connectivity