Enterprise Architect – Cloud

World Wide Technology is looking for a deeply technical Enterprise Architect who specialises in cloud and is genuinely fluent across AWS, Azure, and GCP, and equally comfortable designing the hybrid architectures and migration programmes that move clients from on‑premises infrastructure into the cloud, and operate confidently in between. This is a hands‑on architecture and delivery role, not a single‑cloud speciality.

Responsibilities

• Own end‑to‑end technical delivery of cloud architecture engagements: design authority, low‑level design, migration execution, and post‑go‑live optimisation.
• Host and chair Architecture Review Board (ARB) and Technical Design Authority (TDA) sessions for cloud engagements, owning governance gates, decision records, and design sign‑off.
• Architect multi‑cloud solutions spanning AWS, Azure, and GCP across compute, storage, networking, and identity, selecting the right platform and services for each workload.
• Lead migration strategy and execution for on‑premises to cloud programmes: workload assessment against the 6 R’s (rehost, replatform, repurchase, refactor, retire, retain), dependency mapping, wave planning, and low‑downtime cutover.
• Design hybrid cloud architectures connecting on‑premises data centres to cloud environments, including dedicated connectivity, hybrid identity, and hybrid DNS/name resolution.
• Define cloud landing zone and foundation architectures: multi‑account/subscription/project strategy, guardrails, and policy‑as‑code.
• Advise clients on cloud economics and FinOps: cost visibility, commitment‑based discounting, and rightsizing strategy.
• Define cloud security architecture: identity federation, network segmentation, encryption, and compliance alignment across all three hyperscalers.
• Lead technical design workshops, present architecture and migration roadmaps to client leadership, and act as the named technical escalation point for delivery teams.
• Mentor other cloud architects and engineers and contribute to WWT’s multi‑cloud and migration reference architectures.
• Support pre‑sales through technical scoping, migration effort estimation, and proof‑of‑concept design.

Technical Skill Sets

• Azure Core: Virtual Machines, Virtual Network, Storage, Entra ID (Azure AD), Well‑Architected Framework.
• Azure Landing Zone: Azure Landing Zones, Management Group hierarchy design.
• Azure Networking: ExpressRoute, Virtual WAN for hybrid and multi‑region connectivity.
• Azure Migration: Azure Migrate for assessment, replatforming, and cutover.
• Azure Containers: AKS architecture for modernised workloads.
• GCP Core: Compute Engine, VPC, Cloud Storage, Cloud IAM.
• GCP Landing Zone: Resource Manager hierarchy and Organization Policy design.
• GCP Networking: Cloud Interconnect and hybrid connectivity design.
• GCP Migration: Migrate to Virtual Machines for workload migration.
• GCP Containers: GKE architecture for modernised workloads.
• Migration assessment methodology (the 6 R’s) and tooling.
• Application dependency mapping and realistic, risk‑managed migration wave plans.
• Data migration strategy for online (minimal downtime, replication‑based) and offline (bulk transfer) approaches, including rollback planning.
• Hybrid Cloud Architecture for dedicated hybrid connectivity (Direct Connect, ExpressRoute, Cloud Interconnect) and integration with SD‑WAN and WAN environments.
• Hybrid identity architecture using AD Connect/Entra Connect, federation, and single sign‑on across on‑premises and cloud directories.
• Hybrid DNS and name resolution design across on‑premises and multi‑cloud environments.
• VMware‑on‑cloud bridge technologies (VMware Cloud on AWS, Azure VMware Solution, Google Cloud VMware Engine).
• Workload placement strategy for long‑term hybrid estates.
• Governance & Automation: multi‑account/subscription/project strategy, guardrails (SCPs, Azure Policy, GCP Organization Policy).
• Infrastructure‑as‑code proficiency: Terraform, CloudFormation, Bicep/ARM.
• Tagging, cost allocation, and resource organization standards for governance and FinOps.
• CI/CD and GitOps practices for infrastructure delivery across multi‑cloud environments.
• Identity federation and zero‑trust principles applied consistently across AWS, Azure, and GCP.
• Network security design: security groups/NSGs, cloud‑native firewalls, web application firewalls.
• Encryption at rest and in transit, and key management across multi‑cloud environments.
• Compliance frameworks: SOC 2, ISO 27001, and sector‑specific regimes.
• Cloud‑native observability: CloudWatch, Azure Monitor, GCP Cloud Operations Suite, Datadog, Splunk.

Adjacent Domain Knowledge (Strong Plus)

• Networking (routing/switching, SD‑WAN).
• Virtualization platforms (VMware, Red Hat OpenShift/OpenStack).
• Security architecture, especially zero‑trust and cloud security posture management.
• Kubernetes & container depth beyond managed‑service operation.
• Data platform and analytics services across the hyperscalers (data lakes, warehousing, streaming).
• AI/ML cloud services.

Leadership & Delivery Expectations

• Lead technical delivery independently and act as the final technical authority on cloud and migration decisions for an engagement.
• Mentor other cloud architects and engineers across multiple hyperscaler platforms.
• Navigates multi‑vendor, multi‑cloud complexity confidently, translating it into a clear, risk‑managed migration roadmap for clients.
• Communicates cloud strategy and migration risk clearly to both hands‑on engineering teams and infrastructure leadership.
• Owns migration cutover windows and associated risk management.

Experience

• 10+ years in enterprise architecture, infrastructure, or cloud engineering roles.
• 5+ years working across multiple hyperscale cloud platforms, with demonstrated depth in at least two of AWS, Azure, and GCP and strong working knowledge of the third.
• Proven track record leading technical delivery (not just advisory) of enterprise‑scale on‑premises‑to‑cloud migration programmes.

Certifications

• AWS Certified Solutions Architect – Professional (required) or clear equivalent expert‑level skill.
• Microsoft Certified: Azure Solutions Architect Expert (required) or clear equivalent expert‑level skill.
• Google Professional Cloud Architect – strongly preferred.
• TOGAF 9/10 or equivalent enterprise architecture certification – beneficial.
• FinOps Certified Practitioner – beneficial.

Benefits

• Practical experience with cost visibility and management tooling (Cost Explorer, Azure Cost Management, GCP Billing reports).
• Commitment‑based discount strategies: reserved instances, savings plans, committed use discounts.
• Rightsizing and autoscaling strategy to control cost without compromising resilience.

#J-18808-Ljbffr…