Cloud Enterprise Architect

London / Hybrid – Fully Remote (must be UK based)

World Wide Technology is looking for a deeply technical Enterprise Architect who specialises in cloud and is genuinely fluent across AWS, Azure, and GCP, and equally comfortable designing the hybrid architectures and migration programmes that move clients from on-premises infrastructure into the cloud, and operate confidently in between. This is a hands‑on architecture and delivery role, not a single‑cloud specialism. The successful candidate will own the technical delivery of cloud transformation engagements end to end – landing zone design, migration strategy and execution, hybrid connectivity, security, and cost governance acting as the single point of technical accountability from design through to go‑live. While broad, credible depth across hyperscalers and migration methodology is the core requirement, WWT engagements regularly extend into adjacent domains, networking, virtualization, security, and data and experience in these areas is a genuine advantage for this role.

Key Responsibilities

• iesOwn end-to-end technical delivery of cloud architecture engagements: design authority, low-level design, migration execution, and post-go-live optimisati
• on.Host and chair Architecture Review Board (ARB) and Technical Design Authority (TDA) sessions for cloud engagements, owning governance gates, decision records, and design sign-o
• ff.Architect multi-cloud solutions spanning AWS, Azure, and GCP across compute, storage, networking, and identity, selecting the right platform and services for each worklo
• ad.Lead migration strategy and execution for on-premises to cloud programmes: workload assessment against the 6 R’s (rehost, replatform, repurchase, refactor, retire, retain), dependency mapping, wave planning, and low-downtime cutov
• er.Design hybrid cloud architectures connecting on-premises data centres to cloud environments, including dedicated connectivity, hybrid identity, and hybrid DNS/name resoluti
• on.Define cloud landing zone and foundation architectures: multi-account/subscription/project strategy, guardrails, and policy-as-co
• de.Advise clients on cloud economics and FinOps: cost visibility, commitment-based discounting, and rightsizing strate
• gy.Define cloud security architecture: identity federation, network segmentation, encryption, and compliance alignment across all three hyperscale
• rs.Lead technical design workshops, present architecture and migration roadmaps to client leadership, and act as the named technical escalation point for delivery tea
• ms.Mentor other cloud architects and engineers and contribute to WWT’s multi-cloud and migration reference architectur
• es.Support pre-sales through technical scoping, migration effort estimation, and proof-of-concept desi

Required Technical Skills & Experience

• line10+ years in enterprise architecture, infrastructure, or cloud engineering ro
• les.5+ years working across multiple hyperscale cloud platforms, with demonstrated depth in at least two of AWS, Azure, and GCP and strong working knowledge of the th
• ird.Proven track record leading technical delivery (not just advisory) of enterprise-scale on-premises-to-cloud migration program
• vel)Core services: EC2, VPC, S3, RDS, IAM, and Well-Architected Framework application across engagements. Experience or knowledge of AWS Outp
• ost.Landing zone: AWS Control Tower and Organizations for multi-account governa
• nce.Networking: Transit Gateway, Direct Connect, and VPC peering/segmentation des
• ign.Migration tooling: Application Migration Service (MGN), Database Migration Service (DMS), and Application Discovery Serv
• ice.Containers: EKS and ECS architecture for modernised worklo
• vel)Core services: Virtual Machines, Virtual Network, Storage, Entra ID (Azure AD), and Well-Architected Framework applicat
• ion.Landing zone: Azure Landing Zones and Management Group hierarchy des
• ign.Networking: ExpressRoute and Virtual WAN for hybrid and multi-region connectiv
• ity.Migration tooling: Azure Migrate for assessment, replatforming, and cuto
• ver.Containers: AKS architecture for modernised worklo
• vel)Core services: Compute Engine, VPC, Cloud Storage, and Cloud
• IAM.Landing zone: Resource Manager hierarchy and Organization Policy des
• ign.Networking: Cloud Interconnect and hybrid connectivity des
• ign.Migration tooling: Migrate to Virtual Machines for workload migrat
• ion.Containers: GKE architecture for modernised worklo

Migration & Modernization

• tionDeep working knowledge of migration assessment methodology (the 6 R’s) and the tooling used to appl
• y itExperience building application dependency maps and translating them into realistic, risk-managed migration wave pl
• ans.Data migration strategy for both online (minimal downtime, replication-based) and offline (bulk transfer) approac
• hes.Hands-on experience leading cutover events for production workloads, including rollback plann
• tureDesign of dedicated hybrid connectivity: Direct Connect, ExpressRoute, and Cloud Interconnect, including integration with existing SD-WAN and WAN environme
• nts.Hybrid identity architecture: AD Connect/Entra Connect, federation, and single sign-on across on-premises and cloud director
• ies.Hybrid DNS and name resolution design across on-premises and multi-cloud environme
• nts.Experience with VMware-on-cloud bridge technologies (VMware Cloud on AWS, Azure VMware Solution, Google Cloud VMware Engine) as a migration and coexistence strat
• egy.Workload placement strategy for organisations operating a genuinely long-term hybrid estate, not just a transitional

Landing Zone, Governance & Automation

• tionMulti-account/subscription/project strategy design and the guardrails (SCPs, Azure Policy, GCP Organization Policy) that enforce
• it.Infrastructure-as-code proficiency: Terraform as a primary, cross-cloud standard, plus native tooling (CloudFormation, Bicep/ARM) where requi
• red.Tagging, cost allocation, and resource organisation standards that support governance and FinOps at sc
• ale.CI/CD and GitOps practices for infrastructure delivery across multi-cloud environme

Security & Compliance

• anceIdentity federation and zero trust principles applied consistently across AWS, Azure, and
• GCP.Network security design: security groups/NSGs, cloud-native firewalls, and web application firewa
• lls.Encryption at rest and in transit, and key management across multi-cloud environme
• nts.Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architect

Communication & Delivery

• veryExcellent executive communication and presentation skills; able to flex between deep technical detail and C-suite framing on cloud strategy and migration r
• isk.Proven ability to author low-level design (LLD) and high-level design (HLD) documentation, and migration runbooks, to a professional services stand
• ard.Experience running technical design workshops with senior client stakeholders and multi-vendor delivery te

Certifications

• ionsAWS Certified Solutions Architect – Professional — required, or clearly demonstrated equivalent expert-level sk
• ill.Microsoft Certified: Azure Solutions Architect Expert — required, or clearly demonstrated equivalent expert-level sk
• ill.Google Professional Cloud Architect — strongly prefer
• red.TOGAF 9/10 or equivalent enterprise architecture certification — benefic

Adjacent Technical Skills (Beneficial, Not Required)

• ents.Networking (routing/switching, SD-WAN) given the centrality of hybrid connectivity to this
• role.Virtualization platforms (VMware, Red Hat OpenShift/OpenStack) as common migration source environments.Security architecture, particularly zero trust and cloud security posture manage
• ment.Containers and Kubernetes depth beyond managed-service opera
• tion.Data platform and analytics services across the hyperscalers (data lakes, warehousing, stream
• ing).AI/ML cloud services, given the growing overlap between cloud migration and AI platform enable

Leadership & Delivery Expectations

• tionsLeads technical delivery independently and acts as the final technical authority on cloud and migration decisions for an engage
• ment.Mentors other cloud architects and engineers across multiple hyperscaler platf
• orms.Navigates multi-vendor, multi-cloud complexity confidently, translating it into a clear, risk-managed migration roadmap for cli
• ents.Communicates cloud strategy and migration risk clearly to both hands-on engineering teams and infrastructure leader
• ship.Comfortable owning migration cutover windows and the associated risk manage

#J-18808-Ljbffr…