The Company
NorthMark Compute & Cloud (NMC²) is backed by dedicated leadership and investment, with a clear mission as it operates at the bleeding edge of technology. Its goal is to scale and enhance the high-performance computing (HPC) and cloud infrastructure that supports its clients' research, production, and delivery, enabling breakthroughs that shape the industries of tomorrow. Its engineers build critical infrastructure to eliminate friction in scientific research, simulations, analysis, and decision-making, accelerating discovery and driving faster innovation.
 

The Position

The Cloud Platform Architect will define and guide the platform’s hybrid and fit for purpose multi-cloud strategy, ensuring secure, efficient, and scalable access to cloud resources. This role is responsible for designing multi-tenancy models (landing zones, access brokering) and hybrid cloud networking. This role will partner with the Cloud Engineering team to define the service roadmap, and enabling automation and self-service provisioning through Infrastructure as Code (IaC). The architect will streamline cloud provider usage, integrate cloud identity with Active Directory, and ensure cloud security controls are consistently applied. They will also lead capability mapping and gap analysis across organizational units and customer-facing needs.

Responsibilities:

• Provide architecture/design guidance for secure, efficient, and scalable cloud access across Fit for FP cloud providers like AWS (primary), Azure, and hybrid environments.

• Help enable and curate the Cloud Catalog for the platform consumers; define the developer experience/consumption of the same

• Architect multi-tenancy models using landing zones, access brokering, and guardrails to securely isolate multiple customers.

• Collaborate with the Cloud Engineering team to define service enablement roadmap (which cloud services to onboard, when, and how).

• Rationalize and streamline cloud provider usage, reducing duplication and aligning with enterprise service catalog.

• Define and enforce cloud security architecture: IAM, encryption, network segmentation, compliance-by-design.

• Architect identity integration between enterprise Active Directory (AD) and cloud identity providers (AWS IAM, Azure AD, SSO).

• Drive IaC automation and self-service provisioning using IAC frameworks and Service Catalogs.

• Perform capability mapping and gap analysis across organizational units and customer-facing needs to inform roadmap and investments.

• Provide cloud cost visibility, governance guardrails, budget actuals vs projections, right-sizing guidance and blueprints for the same

• Partner with Security, Platform, and Solution Architects to ensure consistency across cloud/on-prem platforms.

• Maintain Architecture Decision Records (ADRs) for cloud platform choices and patterns.

Requirements:

• Deep expertise in AWS architecture and services (IAM, VPC, EC2, S3, EKS, Organizations, Control Tower).

• Working knowledge of Azure (Active Directory, networking, compute, storage, Kubernetes).

• Hands-on with multi-tenant cloud designs (landing zones, network segmentation, service control policies).

• Experience with Infrastructure as Code (IaC): Terraform, Pulumi, Crossplane, Ansible etc.

• Strong understanding of cloud identity and access management, AD/SSO federation, and role-based access models.

• Cloud security practices (encryption, least-privilege, compliance frameworks).

• Familiarity with cloud cost management and optimization.

• Excellent communication/documentation skills for executive and engineering audiences.
  Preferred:

• 10-12+ years in Cloud Architecture, Cloud Engineering and DevOps roles.

• Proven design of hybrid/multi-cloud architectures at scale.

• Implementation of enterprise landing zones and multi-tenant architectures.

• Experience integrating Active Directory with AWS/Azure identity providers.

• Familiarity with compliance frameworks & enforcement using automation in cloud environments.

• Prior work on service catalogs, capability mapping, and gap analysis to shape enterprise roadmaps.

• Experience collaborating with Security, Networking, and Platform Engineering teams.

• Prior work with FinOps teams to optimize spend and create governance frameworks.