Cloud Architect
Cloud Architect at MHK (Hearst) shapes the architecture of a secure, highly available, multi-account AWS platform for its regulated healthcare SaaS. Day to day: setting architecture standards and reference designs, planning migrations/modernization (ECS, Fargate, serverless), and guiding security (HIPAA/SOC 2/HITRUST), networking, data, and cost decisions using Terraform, Python, and core AWS serv
- Compensation
- Not disclosed
- Location
- Tampa, FL, United States
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 7+ years
- Category
- Architecture
- Posted
Skills
Must have
- 7+ years in AWS cloud architecture, cloud engineering, platform engineering or related discipline, with substantial production AWS experience
- Ability to define and communicate AWS architectures for highly available, secure, scalable applications or SaaS platforms
- Experience leading cloud modernization/transformation programs from assessment through migration, implementation and operational adoption
- Production experience with Terraform and IaC: reusable modules, state management, versioning, testing, drift control
- Strong understanding of AWS networking, IAM, encryption, logging, monitoring and multi-account architecture
- Hands-on familiarity with AWS compute patterns: ECS, Fargate, EC2 Linux, Lambda, API Gateway
- Experience designing or operating cloud environments subject to regulated or audited security requirements
- Ability to influence engineering teams, lead architecture discussions and make tradeoffs among security, reliability, performance, speed and cost
- Bachelor's degree in Computer Science, Engineering, Information Systems or related field, or equivalent practical experience
- AWS Certified Solutions Architect Associate/Professional or AWS Certified DevOps Engineer Professional (equivalent experience considered)
- Must pass background check and drug screening; reside in or relocate to Tampa area within 90 days
Nice to have
- Experience with healthcare software, medical technology, regulated technology or multi-tenant SaaS platforms
- Experience with compliance-as-code practices such as AWS Config rules, OPA/Conftest, CIS benchmark hardening
Full description
The Opportunity
The Cloud Architect shapes how MHK's regulated SaaS platform grows, stays secure and stays reliable. Within the Cloud Platform Engineering organization, you will define and evolve the architecture of a secure, highly available, multi-account AWS platform, owning architecture standards, reference designs, resilience patterns and technical direction across platform and application engineering teams.
You will assess existing systems, define pragmatic migration and modernization paths, and turn business and product needs into target-state AWS architectures. You will set platform standards and make architecture recommendations within the cloud domain, while implementation is delivered in partnership with platform engineering, security, operations, data and application teams, so the platform becomes more scalable, secure, reliable, operable, cost-aware and compliant.
Hybrid: This hybrid role is based in Tampa, FL. Candidates must reside in or be willing to relocate to the Tampa area within 90 days of start.
Position Duties
Cloud Architecture and Technical Strategy
- Define target-state AWS architectures, reference architectures and decision records for secure, scalable, cloud-native SaaS platforms, and lead architecture reviews that translate product, engineering and enterprise roadmaps into implementable cloud designs.
- Design modernization strategies spanning serverless services, Amazon ECS and AWS Fargate, EC2 Linux workloads, APIs and event-driven components, and establish standards for availability, scalability, performance, capacity, service boundaries, tenant isolation and operational readiness.
- Guide multi-region resilience and disaster-recovery architecture, including backup ownership, RTO and RPO targets, failover approaches and restore testing.
Security, Compliance and Risk Architecture
- Design cloud controls that support HIPAA, SOC 2 and HITRUST requirements, partnering with security and compliance teams on control-to-code mappings, audit evidence, control walkthroughs and penetration-test remediation.
- Define patterns for IAM, permission boundaries, service control policies, KMS encryption, Secrets Manager, Parameter Store and least-privilege access, and establish cloud security posture and vulnerability-management patterns using services such as AWS Config, Security Hub, Inspector, GuardDuty and CloudTrail.
Networking, Data and Platform Governance
- Define enterprise AWS networking patterns (Transit Gateway, Site-to-Site VPN, Direct Connect, PrivateLink) and set direction for Amazon RDS for MySQL and Aurora, DynamoDB and ElastiCache, including durability, backup, recovery, replication and performance tradeoffs.