Cloud Infra Architect

Position Summary

The Enterprise Platform Engineer/Architect V is the senior-most individual-contributor role in Infrastructure, owning enterprise cloud architecture across AWS and Azure.

Where an Engineer IV executes against defined architecture, this role defines it — making independent design decisions for multi-cloud infrastructure, leading complex technical initiatives end to end, and acting as a force multiplier for the rest of the engineering team (currently Engineer IV, III, and II-level staff) rather than requiring the same level of oversight a less senior IC would.

Key Responsibilities

• Own end-to-end cloud architecture decisions across AWS and Azure, including multi-account AWS environments (Control Tower, cross-account networking, resource sharing, IAM structures) and the existing Azure footprint, with minimal ramp-up time in a multi-cloud environment.
• Lead technical execution on major infrastructure initiatives independently, without requiring architectural supervision most immediately, the Google Workspace Microsoft 365 migration (group/permissions reconciliation, dependency remediation).
• Design and maintain Infrastructure-as-Code (Terraform) at scale across a rapidly growing set of repositories and environments, setting patterns other engineers build against.
• Own cross-cloud networking: transit routing, VPC endpoints, cloud-to-cloud peering, load balancer/health-path configuration, and multi-region connectivity.

Required Qualifications

• 10+ years of enterprise infrastructure/platform engineering experience, with demonstrated ownership of cloud architecture decisions (not just execution against a given design).
• Deep, hands-on expertise across both AWS and Azure in a multi-cloud enterprise environment.
• Proven experience leading complex technical initiatives (e.g., large-scale migrations, multi-account cloud buildouts) independently and end-to-end.
• Infrastructure-as-Code experience at scale (Terraform preferred).
• Demonstrated ability to mentor and act as a technical escalation point for less senior engineers.
• Experience operating in a regulated/compliance-driven environment — healthcare (HIPAA) or HITRUST/SOC2 experience strongly preferred.

Preferred Qualifications

• Direct HITRUST or SOC2 audit-support experience.
• Experience with Microsoft Entra ID, Key Vault/secrets management, and Microsoft 365/Google Workspace administration or migration projects.
• Experience with Sentinel/MDR or comparable SIEM tooling.
• Background in M&A technical integration (environment convergence, tenant/directory merges).
• DevOps/CI-CD pipeline experience (Azure DevOps or equivalent).