Cloud Enterprise Architect

London / Hybrid - Fully Remote (must be UK based)

World Wide Technology is looking for a deeply technical Enterprise Architect who specialises in cloud and is genuinely fluent across AWS, Azure, and GCP, and equally comfortable designing the hybrid architectures and migration programmes that move clients from on-premises infrastructure into the cloud, and operate confidently in between.

This is a hands‑on architecture and delivery role, not a single‑cloud specialism.

The successful candidate will own the technical delivery of cloud transformation engagements end to end - landing zone design, migration strategy and execution, hybrid connectivity, security, and cost governance acting as the single point of technical accountability from design through to go‑live.

While broad, credible depth across hyperscalers and migration methodology is the core requirement, WWT engagements regularly extend into adjacent domains, networking, virtualization, security, and data and experience in these areas is a genuine advantage for this role.

Key Responsibilities

• ies Own end-to-end technical delivery of cloud architecture engagements: design authority, low-level design, migration execution, and post-go-live optimisati
• on.

Host and chair Architecture Review Board (ARB) and Technical Design Authority (TDA) sessions for cloud engagements, owning governance gates, decision records, and design sign-o

• ff. Architect multi-cloud solutions spanning AWS, Azure, and GCP across compute, storage, networking, and identity, selecting the right platform and services for each worklo
• ad.

Lead migration strategy and execution for on-premises to cloud programmes: workload assessment against the 6 R's (rehost, replatform, repurchase, refactor, retire, retain), dependency mapping, wave planning, and low-downtime cutov

• er. Design hybrid cloud architectures connecting on-premises data centres to cloud environments, including dedicated connectivity, hybrid identity, and hybrid DNS/name resoluti
• on. Define cloud landing zone and foundation architectures: multi-account/subscription/project strategy, guardrails, and policy-as-co
• de. Advise clients on cloud economics and Fin
• Ops: cost visibility, commitment-based discounting, and rightsizing strate
• gy. Define cloud security architecture: identity federation, network segmentation, encryption, and compliance alignment across all three hyperscale
• rs. Lead technical design workshops, present architecture and migration roadmaps to client leadership, and act as the named technical escalation point for delivery tea
• ms. Mentor other cloud architects and engineers and contribute to WWT's multi-cloud and migration reference architectur
• es. Support pre-sales through technical scoping, migration effort estimation, and proof-of-concept desi
• Required Technical Skills & Experience
• line10+ years in enterprise architecture, infrastructure, or cloud engineering ro
• les.5+ years working across multiple hyperscale cloud platforms, with demonstrated depth in at least two of AWS, Azure, and GCP and strong working knowledge of the th
• ird. Proven track record leading technical delivery (not just advisory) of enterprise-scale on-premises-to-cloud migration program
• vel)Core servic es: EC2, VPC, S3, RDS, IAM, and Well-Architected Framework application across engagements. Experience or knowledge of AWS Outp
• ost. Landing zo ne: AWS Control Tower and Organizations for multi-account governa
• nce. Networki ng: Transit Gateway, Direct Connect, and VPC peering/segmentation des
• ign. Migration tooli ng: Application Migration Service (MGN), Database Migration Service (DMS), and Application Discovery Serv
• ice. Containe rs: EKS and ECS architecture for modernised worklo
• vel)Core servic es: Virtual Machines, Virtual Network, Storage, Entra ID (Azure AD), and Well-Architected Framework applicat
• ion. Landing zo ne: Azure Landing Zones and Management Group hierarchy des
• ign. Networki ng: Express Route and Virtual WAN for hybrid and multi-region connectiv
• ity. Migration tooli ng: Azure Migrate for assessment, replatforming, and cuto
• ver. Containe rs: AKS architecture for modernised worklo
• vel)Core servic es: Compute Engine, VPC, Cloud Storage, and Cloud
• IAM. Landing zo ne: Resource Manager hierarchy and Organization Policy des
• ign. Networki ng: Cloud Interconnect and hybrid connectivity des
• ign. Migration tooli ng: Migrate to Virtual Machines for workload migrat
• ion. Containe rs: GKE architecture for modernised worklo
• Migration & Modernization
• tion Deep working knowledge of migration assessment methodology (the 6 R's) and the tooling used to appl
• y it Experience building application dependency maps and translating them into realistic, risk-managed migration wave pl
• ans. Data migration strategy for both online (minimal downtime, replication-based) and offline (bulk transfer) approac
• hes. Hands-on experience leading cutover events for production workloads, including rollback plann
• ture Design of dedicated hybrid connectivity: Direct Connect, Express Route, and Cloud Interconnect, including integration with existing SD-WAN and WAN environme
• nts. Hybrid identity architecture: AD Connect/Entra Connect, federation, and single sign-on across on-premises and cloud director
• ies. Hybrid DNS and name resolution design across on-premises and multi-cloud environme
• nts. Experience with VMware-on-cloud bridge technologies (VMware Cloud on AWS, Azure VMware Solution, Google Cloud VMware Engine) as a migration and coexistence strat
• egy. Workload placement strategy for organisations operating a genuinely long-term hybrid estate, not just a transitional
• Landing Zone, Governance & Automation
• tion Multi-account/subscription/project strategy design and the guardrails (SCPs, Azure Policy, GCP Organization Policy) that enforce
• it. Infrastructure-as-code proficiency: Terraform as a primary, cross-cloud standard, plus native tooling (Cloud Formation, Bicep/ARM) where requi
• red. Tagging, cost allocation, and resource organisation standards that support governance and Fin Ops at sc
• ale. CI/CD and Git Ops practices for infrastructure delivery across multi-cloud environme
• Security & Compliance
• ance Identity federation and zero trust principles applied consistently across AWS, Azure, and
• GCP. Network security design: security groups/NSGs, cloud-native firewalls, and web application firewa
• lls. Encryption at rest and in transit, and key management across multi-cloud environme
• nts. Working knowledge of relevant compliance frameworks (e. g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architect
• Communication & Delivery
• very Excellent executive communication and presentation skills; able to flex between deep technical detail and C-suite framing on cloud strategy and migration r
• isk. Proven ability to author low-level design (LLD) and high-level design (HLD) documentation, and migration runbooks, to a professional services stand
• ard. Experience running technical design workshops with senior client stakeholders and multi-vendor delivery te

Certifications

• ions AWS Certified Solutions Architect – Professional — required, or clearly demonstrated equivalent expert-level sk
• ill. Microsoft Certified: Azure Solutions Architect Expert — required, or clearly demonstrated equivalent expert-level sk
• ill. Google Professional Cloud Architect — strongly prefer
• red. TOGAF 9/10 or equivalent enterprise architecture certification — benefic
• Adjacent Technical Skills (Beneficial, Not Required)
• ents. Networking (routing/switching, SD-WAN) given the centrality of hybrid connectivity to this
• role.

Virtualization platforms (VMware, Red Hat Open Shift/Open Stack) as common migration source environments.

• Security architecture, particularly zero trust and cloud security posture manage
• ment. Containers and Kubernetes depth beyond managed-service opera
• tion. Data platform and analytics services across the hyperscalers (data lakes, warehousing, stream
• ing). AI/ML cloud services, given the growing overlap between cloud migration and AI platform enable
• Leadership & Delivery Expectations
• tions Leads technical delivery independently and acts as the final technical authority on cloud and migration decisions for an engage
• ment. Mentors other cloud architects and engineers across multiple hyperscaler platf
• orms. Navigates multi-vendor, multi-cloud complexity confidently, translating it into a clear, risk-managed migration roadmap for cli
• ents. Communicates cloud strategy and migration risk clearly to both hands-on engineering teams and infrastructure leader
• ship. Comfortable owning migration cutover windows and the associated risk manage
• #J-18808-Ljbffr