Cloud Architect

The primary responsibilities of a cloud architect include:

• Developing cloud strategy: Creating a cloud strategy and plan for adoption
• Designing cloud architecture: Designing cloud environments that meet the organization's needs
• Managing cloud resources: Overseeing the integration and migration of systems into the cloud
• Ensuring security: Developing security frameworks to protect data and applications
• Monitoring cloud activities: Keeping track of cloud activities and responding to technical issues
• Advising on cloud use: Providing advice on how to use cloud technology and deal with high-risk situations
• Developing and implementing cloud governance policies and procedures.
• Collaborating with teams: Working with IT security, vendors, and other teams
• Evaluating and selecting cloud applications, hardware, and software that align with business requirements.
• Designing and organizing cloud systems, including servers, storage, and network infrastructure.
• Defining best practices for migrating infrastructure, including bulk migrating applications to the cloud.
• Identifying and recommending cloud architecture solutions that effectively meet the company's needs.
• Ensuring compliance with relevant industry regulations and security standards.
• Training and supporting development teams on cloud architecture best practices.
• Ensuring the security of cloud-based data and applications against unauthorized access, theft, and other threats.
• Conducting regular security assessments and audits to identify vulnerabilities and develop plans to address them.
• Collaborating with other IT professionals, including network engineers, developers, and system administrators, to integrate cloud security measures into existing systems and processes.
• A strong understanding of cloud computing technologies, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
• Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.
• Operational experience in Tenable Cloud security application is a must

Technical Skills

• Extensive knowledge of cloud computing technologies and current trends.
• Proficiency in cloud platforms such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform.
• Understanding of application architecture, orchestration, virtualization, and security protocols.
• Familiarity with programming languages like Python, Java, and C#.
• Experience with infrastructure as code (IaC) and automation technologies.
• Knowledge of networking concepts, including DNS, TCP/IP, and HTTP.
• Expertise in big data architecture, cost management, and disaster recovery planning.
• Familiarity with cloud security best practices, including encryption, access controls, and identity management.
• Understanding of cloud governance and compliance requirements.
• Having hands-on experience on Cloud governance which includes Data privacy, Risk management, Security and compliance management, Data quality, Data lifecycle management and ownership
• Continuous integration and delivery (CI/CD): Writing scripts to automatically integrate new code and features into the deployment environment
• Automation: Using automation to make software development more consistent, reliable, and efficient
• Infrastructure as Code (IaC): Using scripts to automatically configure the deployment environment
• Configuration management: Using tools to automate the provisioning and configuration of infrastructure and servers
• DevOps engineers use tools like Ansible, Puppet, Chef, Docker, and Kubernetes to perform their duties.
• Design and implement cloud security architecture, including Identity and Access Management (IAM)
• Monitor for security risks, vulnerabilities, and controls
• Analyze, log, and respond to incidents in the cloud environment
• Conduct threat simulations and penetration tests to identify potential threats
• Manage cryptography and encryption for cloud-based data
• Ensure that policies and processes are in place to protect business data

Certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or Certified Cloud Architect (CCA) are preferred.