Cloud Architect
TypeFull-time job
LocationFrance
Posted5 hours ago
How we work ?
Ofelia Perks & Benefits
About the role
We are building our cloud offering to a full SaaS model, and building a new Architecture team to lead that shift.
You'll partner closely with our Head of Architecture on the software-and-cloud vision, and work day to day with the Cloud/DevOps and Platform teams. You'll have real ownership over how we build, secure, and scale the platform as it grows from where it is today toward a multi-tenant, multi-customer product.
How we work -Architecture built together
This role comes with real autonomy, on purpose. Our Head of Architecture will be closely involved at the start, introducing you to the teams and setting direction, and will then step back to let you drive your own scope. We're not looking for someone to manage closely; we're looking for someone who can take a blank page and own it, and who knows when to loop others in.
The Architecture team itself is still taking shape, so a lot of how we work will be built together with you. In practice, that means direct, frequent exchanges with the teams below rather than layers of process, closer to mentorship and architecture review than top-down direction:
Head of Architecture (hiring manager) : software & AI architecture, partnering for a unified product vision
Cloud/DevOps team : daily collaboration and mentoring
Platform team : cross-cutting architecture topics
Information Security Officer : validating cloud security choices
The day-to-day job
Day to day, you'll own the cloud side of that transition end to end:
Design and evolve the platform's multi-tenant cloud architecture (tenant isolation, data models, onboarding flows), robust, scalable, and secure, with AWS as the primary provider and a second cloud provider
Define and promote architecture best practices: high availability, resilience, cost optimization (FinOps)
Lead containerization and orchestration with Kubernetes (cluster design, networking, security, observability, lifecycle management)
Industrialize provisioning and deployments through Infrastructure as Code (Terraform) and CI/CD pipelines (GitOps)
Integrate and operationalize generative AI services, notably Amazon Bedrock (model selection, RAG, AI usage governance)
Own the cloud security architecture, in partnership with our Information Security Officer, who covers ISO 27001/SOC 2 compliance: IAM, encryption, network segmentation, cluster hardening, threat modeling
Define operational resilience practices: disaster recovery (RTO/RPO), backup strategy, SLA/SLO
Mentor and upskill the DevOps and engineering teams
Maintain active technology watch and challenge existing architecture choices
What success looks like
30 days: Understand and diagnose
You've completed a full audit of the current platform: Kubernetes setup (shared cluster, namespace-per-tenant), network, IaC and CI/CD maturity, and you've mapped the gaps against a production-grade SaaS (HA, horizontal scalability, WAF, observability).
You've built working relationships with the Cloud/DevOps and Platform teams and established a lightweight architecture review ritual with them.
You share a prioritized diagnosis with the Head of Architecture: what's solid, what's at risk, what blocks our first customer.
60 days : Define the target and unblock
The target multi-tenant architecture is documented and validated: tenant isolation model, HA strategy, horizontal scaling approach, and the security baseline (including WAF).
The IaC and GitOps roadmap is defined, and the first components are managed through Terraform and automated pipelines.
You've identified the integration pattern for generative AI services (Amazon Bedrock) and validated it with the Platform team.
90 days : Execute toward our first customer
The critical gaps for production readiness (HA, scalability, WAF) are either resolved or scheduled with clear owners and dates.
A production-readiness checklist for onboarding our first SaaS customer is defined and agreed with the teams, you own the architecture sign-off.
Teams are progressively upskilled: architecture decisions are documented (ADRs), and the DevOps team is autonomous on the new IaC foundations.
The person we're looking for
We're not looking for an architect by training who's only ever advised from the outside. The person who thrives here has likely grown into architecture from a hands-on DevOps or backend engineering background, someone who's done the "run" before stepping into design, and who's comfortable in organizations where roles aren't siloed.
Experience & certifications:
Senior experience in cloud architecture and infrastructure, including several years in critical production environments
Hands-on experience taking a SaaS product to production from its early stages
AWS certification required (Solutions Architect Professional preferred)
Technical skills:
Deep Kubernetes expertise: cluster architecture, Helm, operators, service mesh, security (RBAC, network policies, admission controllers)
Strong automation background: Terraform (essential), Ansible, CI/CD pipelines (GitLab CI, GitHub Actions, ArgoCD)
Multi-tenant architecture: tenant isolation, data modeling, onboarding flows
Operational resilience: disaster recovery (RTO/RPO), backup strategy, SLA/SLO definition
Data layer: managed databases, storage, and data migration
Cloud-native security: IAM, secrets management, encryption, audit practices (in partnership with our security team on ISO 27001, SOC 2, GDPR)
Solid grasp of microservices architecture, networking (VPC, DNS, load balancing), and observability (Prometheus, Grafana, CloudWatch...)
Cost-conscious cloud engineering (FinOps): cost optimization and budget governance
Comfort integrating generative AI services in production (e.g., Amazon Bedrock or equivalent). Deep Bedrock experience is a strong plus
Daily, hands-on use of AI-assisted coding tools
Nice-to-have:
Certification on a second cloud provider (Azure, GCP)
Familiarity with EU data residency/sovereignty requirements (relevant given GDPR compliance and sovereign cloud options)
AI-assisted intelligent monitoring and alerting
Soft skills
Ability to make complex technical topics accessible to varied audiences
Technical leadership and genuine appetite for mentoring
Pragmatism and comfortable getting hands-on operationally when needed, without staying there
Autonomy and rigor ability to move forward without constant supervision in a team that's still taking shape
Professional French and English
Hiring process
Our process is designed to move quickly, give you full visibility at every stage, and make the best use of your time.
Screening call with HR (45 min)
Interview with the hiring manager (1h)
Live technical role play interview (1h)
Final interview with CHRO (1h)
Originally posted on Himalayas
Ofelia Perks & Benefits
About the role
We are building our cloud offering to a full SaaS model, and building a new Architecture team to lead that shift.
You'll partner closely with our Head of Architecture on the software-and-cloud vision, and work day to day with the Cloud/DevOps and Platform teams. You'll have real ownership over how we build, secure, and scale the platform as it grows from where it is today toward a multi-tenant, multi-customer product.
How we work -Architecture built together
This role comes with real autonomy, on purpose. Our Head of Architecture will be closely involved at the start, introducing you to the teams and setting direction, and will then step back to let you drive your own scope. We're not looking for someone to manage closely; we're looking for someone who can take a blank page and own it, and who knows when to loop others in.
The Architecture team itself is still taking shape, so a lot of how we work will be built together with you. In practice, that means direct, frequent exchanges with the teams below rather than layers of process, closer to mentorship and architecture review than top-down direction:
Head of Architecture (hiring manager) : software & AI architecture, partnering for a unified product vision
Cloud/DevOps team : daily collaboration and mentoring
Platform team : cross-cutting architecture topics
Information Security Officer : validating cloud security choices
The day-to-day job
Day to day, you'll own the cloud side of that transition end to end:
Design and evolve the platform's multi-tenant cloud architecture (tenant isolation, data models, onboarding flows), robust, scalable, and secure, with AWS as the primary provider and a second cloud provider
Define and promote architecture best practices: high availability, resilience, cost optimization (FinOps)
Lead containerization and orchestration with Kubernetes (cluster design, networking, security, observability, lifecycle management)
Industrialize provisioning and deployments through Infrastructure as Code (Terraform) and CI/CD pipelines (GitOps)
Integrate and operationalize generative AI services, notably Amazon Bedrock (model selection, RAG, AI usage governance)
Own the cloud security architecture, in partnership with our Information Security Officer, who covers ISO 27001/SOC 2 compliance: IAM, encryption, network segmentation, cluster hardening, threat modeling
Define operational resilience practices: disaster recovery (RTO/RPO), backup strategy, SLA/SLO
Mentor and upskill the DevOps and engineering teams
Maintain active technology watch and challenge existing architecture choices
What success looks like
30 days: Understand and diagnose
You've completed a full audit of the current platform: Kubernetes setup (shared cluster, namespace-per-tenant), network, IaC and CI/CD maturity, and you've mapped the gaps against a production-grade SaaS (HA, horizontal scalability, WAF, observability).
You've built working relationships with the Cloud/DevOps and Platform teams and established a lightweight architecture review ritual with them.
You share a prioritized diagnosis with the Head of Architecture: what's solid, what's at risk, what blocks our first customer.
60 days : Define the target and unblock
The target multi-tenant architecture is documented and validated: tenant isolation model, HA strategy, horizontal scaling approach, and the security baseline (including WAF).
The IaC and GitOps roadmap is defined, and the first components are managed through Terraform and automated pipelines.
You've identified the integration pattern for generative AI services (Amazon Bedrock) and validated it with the Platform team.
90 days : Execute toward our first customer
The critical gaps for production readiness (HA, scalability, WAF) are either resolved or scheduled with clear owners and dates.
A production-readiness checklist for onboarding our first SaaS customer is defined and agreed with the teams, you own the architecture sign-off.
Teams are progressively upskilled: architecture decisions are documented (ADRs), and the DevOps team is autonomous on the new IaC foundations.
The person we're looking for
We're not looking for an architect by training who's only ever advised from the outside. The person who thrives here has likely grown into architecture from a hands-on DevOps or backend engineering background, someone who's done the "run" before stepping into design, and who's comfortable in organizations where roles aren't siloed.
Experience & certifications:
Senior experience in cloud architecture and infrastructure, including several years in critical production environments
Hands-on experience taking a SaaS product to production from its early stages
AWS certification required (Solutions Architect Professional preferred)
Technical skills:
Deep Kubernetes expertise: cluster architecture, Helm, operators, service mesh, security (RBAC, network policies, admission controllers)
Strong automation background: Terraform (essential), Ansible, CI/CD pipelines (GitLab CI, GitHub Actions, ArgoCD)
Multi-tenant architecture: tenant isolation, data modeling, onboarding flows
Operational resilience: disaster recovery (RTO/RPO), backup strategy, SLA/SLO definition
Data layer: managed databases, storage, and data migration
Cloud-native security: IAM, secrets management, encryption, audit practices (in partnership with our security team on ISO 27001, SOC 2, GDPR)
Solid grasp of microservices architecture, networking (VPC, DNS, load balancing), and observability (Prometheus, Grafana, CloudWatch...)
Cost-conscious cloud engineering (FinOps): cost optimization and budget governance
Comfort integrating generative AI services in production (e.g., Amazon Bedrock or equivalent). Deep Bedrock experience is a strong plus
Daily, hands-on use of AI-assisted coding tools
Nice-to-have:
Certification on a second cloud provider (Azure, GCP)
Familiarity with EU data residency/sovereignty requirements (relevant given GDPR compliance and sovereign cloud options)
AI-assisted intelligent monitoring and alerting
Soft skills
Ability to make complex technical topics accessible to varied audiences
Technical leadership and genuine appetite for mentoring
Pragmatism and comfortable getting hands-on operationally when needed, without staying there
Autonomy and rigor ability to move forward without constant supervision in a team that's still taking shape
Professional French and English
Hiring process
Our process is designed to move quickly, give you full visibility at every stage, and make the best use of your time.
Screening call with HR (45 min)
Interview with the hiring manager (1h)
Live technical role play interview (1h)
Final interview with CHRO (1h)
Originally posted on Himalayas
Apply on Himalayas →
Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.