Architect

Staff Cloud Engineer (Platform & Infrastructure)
Role Overview
We are seeking a Staff Cloud Engineer who combines deep architectural thinking with elite hands-on execution. This role will lead the design and implementation of our AWS cloud platform, driving the migration of a complex global on-premise ecosystem into a secure, scalable, multi-account cloud architecture.
This role requires deep expertise in both Infrastructure as Code (Terraform/Terragrunt) and configuration management (Ansible) to support a hybrid platform spanning on-prem and AWS environments.
You will operate at the intersection of platform engineering, infrastructure as code, networking, and cloud governance, enabling engineering teams to build and operate reliably at scale.
Key Responsibilities
Design and build a scalable AWS multi-account architecture using Control Tower and AFT (Account Factory for Terraform)
Lead infrastructure as code (IaC) strategy using Terraform and Terragrunt, ensuring modular, reusable, and production-grade patterns
Architect and implement hub-and-spoke networking, including Cloud WAN, VPC sharing (RAM), routing, and hybrid connectivity (VPN)
Drive on-prem to AWS migration, including workload modernization and environment standardization
Own and evolve Ansible-based provisioning and configuration workflows across all environments
Ensure tight integration between Terraform-provisioned infrastructure and Ansible-configured application stacks
Refactor and standardize Ansible roles, playbooks, and inventories for scalability and maintainabilitquirement)
design
Multi-account connectivity (VPC peering, Transit Gateway, Cloud WAN)
Hybrid networking (site-to-site VPN, routing policies)
Deep understanding of routing tables, CIDR planning, and IPAM
DevOps & CI/CD
Experience with GitHub Actions (or similar CI/CD platforms)
Strong understanding of pipeline design, approvals, and environment promotion strategies
Security & Governance
IAM design (least privilege, cross-account roles)
Experience with SCPs, guardrails, and policy enforcement
Secure networking and secrets management best practices

Work arrangement
Hybrid