We are seeking a dynamic, consultative **Cloud Architect** to join our team. This role is tailored for an experienced professional who is deeply familiar with the core cloud infrastructure, networking, security, and observability concepts required by large enterprise customers.
In this role, you will bridge the gap between high-level enterprise business strategy and technical execution. You will work closely with enterprise clients to uncover their specific structural or operational pain points, design purpose-fit, well-architected multi-cloud environments across **AWS** and **Google Cloud Platform (GCP)**, and maintain end-to-end technical accountability for the successful outcome of the delivery.
Enterprise Networking & Security Architecture
Complex Cloud Networking: Design resilient, enterprise-grade network topologies involving complex routing, Hub-and-Spoke models, VPCs, Shared VPCs, Transit Gateways, AWS Direct Connect, and Google Cloud Interconnect.
Enterprise Security Concepts: Architect robust Identity and Access Management (IAM) strategies, encryption models (KMS/Cloud KMS), and perimeter security controls (WAF, Enterprise Firewalls, DDoS mitigation) tailored for large-scale multi-tenant environments.
SecOps & Compliance Integration:Define the patterns for automated security guardrails, secure landing zone baselines, and continuous compliance scanning within enterprise delivery pipelines.
Core Infrastructure & Observability Governance
Well-Architected Framework Alignment: Serve as the custodian of cloud architectural integrity, ensuring all custom designs strictly map back to the AWS Well-Architected Framework and GCP Architecture Framework pillars (with a strong focus on Operational Excellence and Security).
Centralized Logging & Monitoring Architecture: Design enterprise-wide observability strategies. Define patterns for multi-account centralized logging, audit trails, real-time alerting, and telemetry aggregation required for operational visibility and compliance.
IaC Governance:Define the standards and architectural structures for Infrastructure as Code (IaC). Review configurations to ensure modular, secure, and compliant environments across client workloads.
Consulting, Discovery & Delivery Accountability
Pain Point Identification:Engage directly with enterprise stakeholders and technical teams to diagnose existing infrastructure bottlenecks, operational inefficiencies, visibility gaps, and architectural pain points.
Purpose-Fit Solution Design:Translate identified client challenges and strict technical/regulatory requirements into tailored, purpose-fit technical blueprints that solve specific business issues.
Delivery Accountability:Act as the technical lead and owner for assigned client engagements, maintaining full accountability for the successful execution and technical outcome of the final delivery.
Experience
6 to 8 years of experience in cloud architecture, enterprise network engineering, or cloud infrastructure design.
At least 2 years of active experience in a professional services or IT consulting environment.
Highly Regulated Environments (Plus)
Strong track record of navigating architecture requirements for regulated industries (e.g., Public Sector, Financial Services) and compliance frameworks like IM8, SOC2, or ISO27001.
Government Commercial Cloud / GCC (Plus):Experience engineering within the Government Commercial Cloud (GCC / GCC 2.0) framework or equivalent public-sector cloud architectures.
Technical Skills & Best Practices
Observability & Logging Mastery:Deep understanding of distributed monitoring, logging, and tracing concepts. Strong familiarity with native cloud services including AWS CloudWatch, AWS CloudTrail, Google Cloud Monitoring, and Google Cloud Logging.
Enterprise Network & Security Familiarity:Deep familiarity with enterprise cloud connectivity, BGP, DNS routing, load balancing topologies, Service Meshes, and multi-tenant isolation techniques.
Automation & CI/CD Guardrails (Preferred):Strong understanding of best practices surrounding Terraform (or OpenTofu) and GitHub Workflows (GitHub Actions). Ability to define architectural standards, review configurations, design workflow gates, and guide engineering teams on implementation.
Code & Scripting Comprehension:Ability to read, interpret, and evaluate script logic (Python, Bash, or Go) to ensure automated deployment architectures align with operational blueprints.
Desirable Tooling & Domain Pluses (Good-to-Have)
Enterprise Security & Proxy Tooling:Familiarity with integrating or architecting alongside third-party enterprise security solutions such as Palo Alto NGFW, Forcepoint, or Zscaler web proxies is a major plus.
Third-Party Observability
Familiarity with enterprise-grade monitoring and SIEM platforms like Datadog and Splunk is highly valued.
Enterprise Data Architecture & Governance
Strong conceptual understanding of modern data topologies (Data Lakes, Lakehouses, Data Mesh). Familiarity with cloud-native data governance, cataloging, and access control tools (e.g., AWS Lake Formation, GCP Dataplex, AWS Glue, Google Cloud Data Catalog).
Platform Engineering Concepts
Conceptual knowledge of platform engineering practices, including Internal Developer Platforms (IDPs), defining "Golden Paths," or exposure to tools/methodologies like Backstage, GitOps, or Crossplane.
Emerging Workloads:General exposure to high-level architectural requirements for hosting modern workloads, such as scalable infrastructure concepts for AI/ML pipelines.
Certifications
AWS:Certified Solutions Architect – Professional (Must Have)
AWS Certified Advanced Networking – Specialty (Must Have)
AWS Certified Security – Specialty (Must Have)
GCP Professional Cloud Architect
GCP Professional Cloud Network Engineer, or Professional Cloud Security Engineer.
Soft Skills
Consultative Mindset:Strong empathy and active listening skills required to successfully draw out pain points and align technical solutions with client business goals.
Ownership & Accountability:A driven, results-oriented attitude with a track record of driving complex technical projects over the finish line.
Communication:Excellent verbal and written communication skills with the ability to articulate complex networking, security, and architectural concepts to both technical teams and executive stakeholders.
BENEFITS & PERKS FOR WORKING AT OLLION
Our employees multiply their potential because they have opportunities to: Create a lasting Impact, Learn and Grow professionally & personally, Experience great Culture, and Be your Whole Self!
Beyond an amazing, collaborative work environment, great people, and inspiring, innovative work, we have some great benefits and perks:
Benchmarked, competitive, in-market total rewards package including (but not limited to): base salary & short-term incentive for all employees
Fully remote-first, small but Global organization; ‘learn wherever, whenever’ frees our people from a rigid view of learning and growth
Retirement planning (i.e. CPF, EPF, company-matched 401(k))
Globally, we build benefit plans that offer choices for whatever stage in life our employees are in and allow for flexibility as life happens. Employees have access to a fully comprehensive benefits package to choose the medical, dental, and vision insurance plan that best fits their lives. In addition to great healthcare coverage, we also offer all employees mental health resources and additional wellness programs.
Generous time off and leave allowances
And more!
All your information will be kept confidential according to EEO guidelines.
Ollion is an equal opportunity employer. We celebrate diversity and we are committed to creating an inclusive environment for all employees. Ollion does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, parental status, military service, or other non-merit factor.
