Asks for

The ad says“AWS Certified Advanced Networking – Specialty (Must Have)”
The ad says“AWS Certified Security – Specialty (Must Have)”
The ad says“AWS:Certified Solutions Architect – Professional (Must Have)”
The ad says“GCP Professional Cloud Architect”
The ad says“GCP Professional Cloud Network Engineer, or Professional Cloud Security Engineer.”
The ad says“GCP Professional Cloud Network Engineer, or Professional Cloud Security Engineer.”
The ad says“Observability & Logging Mastery:Deep understanding of distributed monitoring, logging, and tracing concepts. Strong familiarity with native cloud services including AWS CloudWatch, AWS CloudTrail, Google Cloud Monitoring, and Google Cloud Logging.”
The ad says“Observability & Logging Mastery:Deep understanding of distributed monitoring, logging, and tracing concepts. Strong familiarity with native cloud services including AWS CloudWatch, AWS CloudTrail, Google Cloud Monitoring, and Google Cloud Logging.”
The ad says“Enterprise Network & Security Familiarity:Deep familiarity with enterprise cloud connectivity, BGP, DNS routing, load balancing topologies, Service Meshes, and multi-tenant isolation techniques.”
The ad says“6 to 8 years of experience in cloud architecture, enterprise network engineering, or cloud infrastructure design.”
The ad says“6 to 8 years of experience in cloud architecture, enterprise network engineering, or cloud infrastructure design.”
The ad says“Enterprise Network & Security Familiarity:Deep familiarity with enterprise cloud connectivity, BGP, DNS routing, load balancing topologies, Service Meshes, and multi-tenant isolation techniques.”
The ad says“6 to 8 years of experience in cloud architecture, enterprise network engineering, or cloud infrastructure design.”
The ad says“Observability & Logging Mastery:Deep understanding of distributed monitoring, logging, and tracing concepts. Strong familiarity with native cloud services including AWS CloudWatch, AWS CloudTrail, Google Cloud Monitoring, and Google Cloud Logging.”
The ad says“Observability & Logging Mastery:Deep understanding of distributed monitoring, logging, and tracing concepts. Strong familiarity with native cloud services including AWS CloudWatch, AWS CloudTrail, Google Cloud Monitoring, and Google Cloud Logging.”
The ad says“At least 2 years of active experience in a professional services or IT consulting environment.”
The ad says“Enterprise Network & Security Familiarity:Deep familiarity with enterprise cloud connectivity, BGP, DNS routing, load balancing topologies, Service Meshes, and multi-tenant isolation techniques.”
The ad says“At least 2 years of active experience in a professional services or IT consulting environment.”
The ad says“Enterprise Network & Security Familiarity:Deep familiarity with enterprise cloud connectivity, BGP, DNS routing, load balancing topologies, Service Meshes, and multi-tenant isolation techniques.”

Values

The ad says“Strong conceptual understanding of modern data topologies (Data Lakes, Lakehouses, Data Mesh). Familiarity with cloud-native data governance, cataloging, and access control tools (e.g., AWS Lake Formation, GCP Dataplex, AWS Glue, Google Cloud Data Catalog).”
The ad says“Strong conceptual understanding of modern data topologies (Data Lakes, Lakehouses, Data Mesh). Familiarity with cloud-native data governance, cataloging, and access control tools (e.g., AWS Lake Formation, GCP Dataplex, AWS Glue, Google Cloud Data Catalog).”
The ad says“Conceptual knowledge of platform engineering practices, including Internal Developer Platforms (IDPs), defining "Golden Paths," or exposure to tools/methodologies like Backstage, GitOps, or Crossplane.”
The ad says“Code & Scripting Comprehension:Ability to read, interpret, and evaluate script logic (Python, Bash, or Go) to ensure automated deployment architectures align with operational blueprints.”
The ad says“Conceptual knowledge of platform engineering practices, including Internal Developer Platforms (IDPs), defining "Golden Paths," or exposure to tools/methodologies like Backstage, GitOps, or Crossplane.”
The ad says“Familiarity with enterprise-grade monitoring and SIEM platforms like Datadog and Splunk is highly valued.”
The ad says“Enterprise Security & Proxy Tooling:Familiarity with integrating or architecting alongside third-party enterprise security solutions such as Palo Alto NGFW, Forcepoint, or Zscaler web proxies is a major plus.”
The ad says“Strong conceptual understanding of modern data topologies (Data Lakes, Lakehouses, Data Mesh). Familiarity with cloud-native data governance, cataloging, and access control tools (e.g., AWS Lake Formation, GCP Dataplex, AWS Glue, Google Cloud Data Catalog).”
The ad says“Automation & CI/CD Guardrails (Preferred):Strong understanding of best practices surrounding Terraform (or OpenTofu) and GitHub Workflows (GitHub Actions). Ability to define architectural standards, review configurations, design workflow gates, and guide engineering teams on implementation.”
The ad says“Automation & CI/CD Guardrails (Preferred):Strong understanding of best practices surrounding Terraform (or OpenTofu) and GitHub Workflows (GitHub Actions). Ability to define architectural standards, review configurations, design workflow gates, and guide engineering teams on implementation.”
The ad says“Conceptual knowledge of platform engineering practices, including Internal Developer Platforms (IDPs), defining "Golden Paths," or exposure to tools/methodologies like Backstage, GitOps, or Crossplane.”
The ad says“Code & Scripting Comprehension:Ability to read, interpret, and evaluate script logic (Python, Bash, or Go) to ensure automated deployment architectures align with operational blueprints.”
The ad says“Strong conceptual understanding of modern data topologies (Data Lakes, Lakehouses, Data Mesh). Familiarity with cloud-native data governance, cataloging, and access control tools (e.g., AWS Lake Formation, GCP Dataplex, AWS Glue, Google Cloud Data Catalog).”
The ad says“Automation & CI/CD Guardrails (Preferred):Strong understanding of best practices surrounding Terraform (or OpenTofu) and GitHub Workflows (GitHub Actions). Ability to define architectural standards, review configurations, design workflow gates, and guide engineering teams on implementation.”
The ad says“Enterprise Security & Proxy Tooling:Familiarity with integrating or architecting alongside third-party enterprise security solutions such as Palo Alto NGFW, Forcepoint, or Zscaler web proxies is a major plus.”
The ad says“Code & Scripting Comprehension:Ability to read, interpret, and evaluate script logic (Python, Bash, or Go) to ensure automated deployment architectures align with operational blueprints.”
The ad says“Familiarity with enterprise-grade monitoring and SIEM platforms like Datadog and Splunk is highly valued.”
The ad says“Automation & CI/CD Guardrails (Preferred):Strong understanding of best practices surrounding Terraform (or OpenTofu) and GitHub Workflows (GitHub Actions). Ability to define architectural standards, review configurations, design workflow gates, and guide engineering teams on implementation.”
The ad says“Enterprise Security & Proxy Tooling:Familiarity with integrating or architecting alongside third-party enterprise security solutions such as Palo Alto NGFW, Forcepoint, or Zscaler web proxies is a major plus.”

Company Description

OUR STORY

Let’s be honest: there are lots of people out there doing what we do. We’re just not convinced they’re doing it right. Businesses are hungry for innovation and opportunity, but not at the cost of their independence. At Ollion, we’ve connected companies and capabilities around the world to help ambitious organizations make the most of their transformation and leave the status quo in the dust.

WORKING AT OLLION

Innovation is risky. It demands bold steps and big questions, but that’s the price of making change. We’ve got our head in the cloud and two feet on the ground, channeling tech’s endless potential towards a single goal: making a world of difference. And we’re building a global team to do just that— a team capable of making game-changing breakthroughs without ever losing sight of the people it will impact. This is more than consulting. This is the change you can be.

THE OLLION DIFFERENCE

At Ollion, we’re all in on your independence. Our teams are seasoned. Our solutions are straightforward—sometimes even groundbreaking. And our engagements? Exactly as long as you want them to be. We deliver fresh thinking and hard-earned insight in a way that works for you and your customers, arming your organization with everything you need to make your transformation truly mean something.

WORKING WITH OLLION (our clients’ experiences)

Progress matters more than process. Our global team of cloud-native pros is all about creating new and better ways to work—not just by solving your tech challenges, but by using technology to solve your business challenges. We keep the formulas, frameworks, and ten-point plans to a minimum, tackling your most pressing problems with a proprietary mix of good-old-fashioned ingenuity and refreshing humanity.

Job Description

We are seeking a dynamic, consultative **Cloud Architect** to join our team. This role is tailored for an experienced professional who is deeply familiar with the core cloud infrastructure, networking, security, and observability concepts required by large enterprise customers.

In this role, you will bridge the gap between high-level enterprise business strategy and technical execution. You will work closely with enterprise clients to uncover their specific structural or operational pain points, design purpose-fit, well-architected multi-cloud environments across **AWS** and **Google Cloud Platform (GCP)**, and maintain end-to-end technical accountability for the successful outcome of the delivery.

Enterprise Networking & Security Architecture
- Complex Cloud Networking: Design resilient, enterprise-grade network topologies involving complex routing, Hub-and-Spoke models, VPCs, Shared VPCs, Transit Gateways, AWS Direct Connect, and Google Cloud Interconnect.
- Enterprise Security Concepts: Architect robust Identity and Access Management (IAM) strategies, encryption models (KMS/Cloud KMS), and perimeter security controls (WAF, Enterprise Firewalls, DDoS mitigation) tailored for large-scale multi-tenant environments.
- SecOps & Compliance Integration:Define the patterns for automated security guardrails, secure landing zone baselines, and continuous compliance scanning within enterprise delivery pipelines.
Core Infrastructure & Observability Governance
- Well-Architected Framework Alignment: Serve as the custodian of cloud architectural integrity, ensuring all custom designs strictly map back to the AWS Well-Architected Framework and GCP Architecture Framework pillars (with a strong focus on Operational Excellence and Security).
- Centralized Logging & Monitoring Architecture: Design enterprise-wide observability strategies. Define patterns for multi-account centralized logging, audit trails, real-time alerting, and telemetry aggregation required for operational visibility and compliance.
- IaC Governance:Define the standards and architectural structures for Infrastructure as Code (IaC). Review configurations to ensure modular, secure, and compliant environments across client workloads.
Consulting, Discovery & Delivery Accountability
- Pain Point Identification:Engage directly with enterprise stakeholders and technical teams to diagnose existing infrastructure bottlenecks, operational inefficiencies, visibility gaps, and architectural pain points.
- Purpose-Fit Solution Design:Translate identified client challenges and strict technical/regulatory requirements into tailored, purpose-fit technical blueprints that solve specific business issues.
- Delivery Accountability:Act as the technical lead and owner for assigned client engagements, maintaining full accountability for the successful execution and technical outcome of the final delivery.

Qualifications

Experience:

6 to 8 years of experience in cloud architecture, enterprise network engineering, or cloud infrastructure design.
At least 2 years of active experience in a professional services or IT consulting environment.

Highly Regulated Environments (Plus):

Strong track record of navigating architecture requirements for regulated industries (e.g., Public Sector, Financial Services) and compliance frameworks like IM8, SOC2, or ISO27001.
Government Commercial Cloud / GCC (Plus):Experience engineering within the Government Commercial Cloud (GCC / GCC 2.0) framework or equivalent public-sector cloud architectures.

Technical Skills & Best Practices

Observability & Logging Mastery:Deep understanding of distributed monitoring, logging, and tracing concepts. Strong familiarity with native cloud services including AWS CloudWatch, AWS CloudTrail, Google Cloud Monitoring, and Google Cloud Logging.
Enterprise Network & Security Familiarity:Deep familiarity with enterprise cloud connectivity, BGP, DNS routing, load balancing topologies, Service Meshes, and multi-tenant isolation techniques.
Automation & CI/CD Guardrails (Preferred):Strong understanding of best practices surrounding Terraform (or OpenTofu) and GitHub Workflows (GitHub Actions). Ability to define architectural standards, review configurations, design workflow gates, and guide engineering teams on implementation.
Code & Scripting Comprehension:Ability to read, interpret, and evaluate script logic (Python, Bash, or Go) to ensure automated deployment architectures align with operational blueprints.

Desirable Tooling & Domain Pluses (Good-to-Have)

Enterprise Security & Proxy Tooling:Familiarity with integrating or architecting alongside third-party enterprise security solutions such as Palo Alto NGFW, Forcepoint, or Zscaler web proxies is a major plus.

Third-Party Observability:

Familiarity with enterprise-grade monitoring and SIEM platforms like Datadog and Splunk is highly valued.

Enterprise Data Architecture & Governance

Strong conceptual understanding of modern data topologies (Data Lakes, Lakehouses, Data Mesh). Familiarity with cloud-native data governance, cataloging, and access control tools (e.g., AWS Lake Formation, GCP Dataplex, AWS Glue, Google Cloud Data Catalog).

Platform Engineering Concepts

Conceptual knowledge of platform engineering practices, including Internal Developer Platforms (IDPs), defining "Golden Paths," or exposure to tools/methodologies like Backstage, GitOps, or Crossplane.
Emerging Workloads:General exposure to high-level architectural requirements for hosting modern workloads, such as scalable infrastructure concepts for AI/ML pipelines.

Certifications

AWS:Certified Solutions Architect – Professional (Must Have)
AWS Certified Advanced Networking – Specialty (Must Have)
AWS Certified Security – Specialty (Must Have)
GCP Professional Cloud Architect
GCP Professional Cloud Network Engineer, or Professional Cloud Security Engineer.

Soft Skills

Consultative Mindset:Strong empathy and active listening skills required to successfully draw out pain points and align technical solutions with client business goals.
Ownership & Accountability:A driven, results-oriented attitude with a track record of driving complex technical projects over the finish line.
Communication:Excellent verbal and written communication skills with the ability to articulate complex networking, security, and architectural concepts to both technical teams and executive stakeholders.

Additional Information

BENEFITS & PERKS FOR WORKING AT OLLION

Our employees multiply their potential because they have opportunities to: Create a lasting Impact, Learn and Grow professionally & personally, Experience great Culture, and Be your Whole Self!

Beyond an amazing, collaborative work environment, great people, and inspiring, innovative work, we have some great benefits and perks:

Benchmarked, competitive, in-market total rewards package including (but not limited to): base salary & short-term incentive for all employees
Fully remote-first, small but Global organization; ‘learn wherever, whenever’ frees our people from a rigid view of learning and growth
Retirement planning (i.e. CPF, EPF, company-matched 401(k))
Globally, we build benefit plans that offer choices for whatever stage in life our employees are in and allow for flexibility as life happens. Employees have access to a fully comprehensive benefits package to choose the medical, dental, and vision insurance plan that best fits their lives. In addition to great healthcare coverage, we also offer all employees mental health resources and additional wellness programs.
Generous time off and leave allowances
And more!

All your information will be kept confidential according to EEO guidelines.

Ollion is an equal opportunity employer. We celebrate diversity and we are committed to creating an inclusive environment for all employees. Ollion does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, parental status, military service, or other non-merit factor.