Senior Cloud Architect, RAAS | Automation Services
Posted Updated 2
views
Summary
Senior cloud architect in Aprio's Risk Advisory & Automation Services practice, leading client engagements end-to-end: designing secure multi-cloud landing zones and Zero Trust architectures on Azure, AWS, and Google Cloud aligned to frameworks like CMMC, NIST, and FedRAMP, while mentoring architects and supporting pre-sales.
Work with a Top 20 CPA and advisory firm that Accounts for Anything. Aprio has 40 U.S. office locations, as well as international office locations and more than 3,200 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio.
Job Sumamry
Aprio is seeking a Senior Cloud Architect to join its Risk Advisory & Assurance | Automation Services practice and help organizations design, modernize, and protect cloud environments while navigating complex cybersecurity, regulatory, and operational requirements. In this role, you will lead cloud architecture engagements from discovery through delivery, translating business, security, and compliance requirements into resilient, scalable, and supportable solutions across Microsoft Azure, AWS, and Google Cloud. You will serve as the senior technical authority for clients navigating cloud adoption, modernization, Zero Trust, governance, and regulated-environment initiatives while helping delivery teams apply repeatable architecture and engineering practices.
This position supports U.S. government and defense-related clients; certain engagements require personnel who are eligible to obtain a U.S. security clearance or who meet client-defined access requirements for controlled environment
What You'll Gain / Impact:
- Opportunity to serve as the senior technical authority on high-complexity cloud transformation and cybersecurity engagements.
- Exposure to a broad range of client environments, including U.S. government, defense, and regulated industries.
- Ability to shape cloud strategy, architecture standards, and security practices that drive lasting organizational change.
- Hands-on experience architecting multi-cloud solutions across Azure, AWS, and Google Cloud in real-world, high-stakes environments.
- Platform to lead, mentor, and develop architects and engineers within a growing, purpose-driven consulting practice.
Key Responsibilities:
- Lead client engagements from discovery through delivery, serving as the senior technical consultant and architecture authority.
- Facilitate executive briefings, workshops, and architecture sessions that translate business objectives, risk tolerance, and compliance obligations into actionable cloud strategies.
- Develop current-state and target-state architectures covering applications, infrastructure, identity, networking, security, data protection, observability, resilience, and operations.
- Design secure landing zones and cloud foundations using governance guardrails, account/subscription structures, policy enforcement, centralized logging, network segmentation, and identity-first access controls.
- Architect hybrid and multi-cloud solutions across Microsoft Azure, AWS, and/or Google Cloud, selecting services and patterns appropriate to client requirements and risk.
- Embed cybersecurity into architecture decisions using Zero Trust, least privilege, privileged access management, threat modeling, secure configuration, vulnerability management, encryption, and secrets management.
- Align solutions to compliance frameworks including CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and other client-specific regulatory or contractual requirements.
- Design for regulated workloads including controlled data boundaries, audit evidence, logging, data residency, secure administration, and separation of duties.
- Provide architecture oversight during implementation, reviewing detailed designs, infrastructure-as-code, configurations, security controls, and technical deliverables for quality and conformance.
- Partner with cybersecurity, compliance, engineering, and operations teams to resolve design tradeoffs and ensure solutions are operable, measurable, and audit-ready.
- Evaluate and rationalize cloud services balancing security, compliance, performance, availability, cost, supportability, and time to value.
- Develop roadmaps and migration strategies for application modernization, data migration, identity transformation, and cloud security uplift.
- Create client-ready architecture artifacts including diagrams, decision records, control mappings, implementation plans, risk registers, and executive recommendations.
- Lead, mentor, and develop a team of architects and engineers while contributing to technical reviews, estimation, solution quality, and continuous improvement.
- Support pre-sales and solution development by shaping scopes, assumptions, level-of-effort estimates, and technical approaches for complex opportunities.
Candidate Qualifications:
- Bachelor's degree in computer science, engineering, cybersecurity, information systems, or a related field, or equivalent practical experience.
- 10+ years of progressive technology experience in architecture, engineering, cybersecurity, cloud transformation, or related consulting responsibilities.
- 7+ years of client-facing consulting or architecture experience leading complex technical discussions and delivering tailored solutions for mid-market or enterprise organizations.
- 5+ years of hands-on cloud architecture experience designing and implementing production solutions in Azure, AWS, and/or Google Cloud.
- Demonstrated cybersecurity and compliance experience integrating technical controls and regulatory requirements into cloud architectures and implementation roadmaps.
- Strong architecture communication skills with the ability to explain risks, tradeoffs, and recommendations to executives, security leaders, auditors, engineers, and business stakeholders.
- Working knowledge of architecture and security methods such as well-architected frameworks, threat modeling, shared responsibility, Zero Trust, defense-in-depth, and secure-by-design principles.
- Ability to lead through ambiguity, manage competing requirements, drive decisions, and maintain delivery momentum across multiple stakeholder groups.
- Experience producing high-quality technical documentation including reference architectures, diagrams, standards, decision records, and implementation guidance.
Technical Depth:
Deep expertise in at least three of the following areas, with working knowledge of the others:
- Cloud architecture: Azure, AWS, and/or Google Cloud; landing zones; hybrid connectivity; resiliency; disaster recovery; and cloud operating models.
- Identity and access: Entra ID and cloud-native IAM; federation; Conditional Access; privileged access; just-in-time administration; workload identities; and secrets management.
- Cloud security operations: Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud, and/or comparable AWS or Google Cloud security services; SIEM/SOAR; detection engineering; and threat hunting.
- Data protection: encryption, key management, data classification, DLP, Microsoft Purview or comparable services, retention, and secure data lifecycle controls.
- Network security: segmentation, private connectivity, firewalls, secure remote administration, egress control, DNS security, web application protection, and Zero Trust network access.
- DevSecOps and automation: infrastructure-as-code, policy-as-code, CI/CD security, configuration management, PowerShell, Python, KQL, APIs, and automated compliance validation.
- Governance and compliance: cloud control frameworks, continuous monitoring, evidence generation, risk management, policy development, and remediation planning.
Certifications:
At least one of the following active certifications is required or must be obtained within 90 days of hire:
- Cybersecurity and architecture: CISSP, CCSP, or SABSA certification.
- Microsoft: AZ-305, AZ-500, or SC-100.
- AWS: AWS Certified Solutions Architect – Professional or AWS Certified Security – Specialty.
- Google Cloud: Professional Cloud Architect or Professional Cloud Security Engineer.
Additional cloud, security, networking, DevOps, or compliance certifications are preferred. Active certifications are required for consideration.
Preferred Experience:
- Architecture for U.S. Government or defense-related environments including Azure Government, Microsoft 365 GCC High, AWS GovCloud (US), or comparable regulated cloud platforms.
- Implementing or assessing controls for CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, DoD impact levels, or similar frameworks.
- Application and platform modernization including containers, Kubernetes, serverless architectures, APIs, data platforms, and cloud-native integration patterns.
- Cloud financial governance including cost allocation, optimization, forecasting, and architecture decisions informed by FinOps practices.
- Technical leadership in consulting delivery including mentoring, quality assurance, reusable intellectual property, and support for proposals or statements of work.
The application window is anticipated to close on November 16, 2026 and may be extended as needed.
Why work for Aprio:
Whether you are just starting out, looking to advance into management or searching for your next leadership role, Aprio offers an opportunity to grow with a future-focused, innovative firm.
Perks/Benefits we offer for full-time team members:
- Medical, Dental, and Vision Insurance on the first day of employment
- Flexible Spending Account and Dependent Care Account
- 401k with Profit Sharing
- 9+ holidays and discretionary time off structure
- Parental Leave – coverage for both primary and secondary caregivers
- Tuition Assistance Program and CPA support program with cash incentive upon completion
- Discretionary incentive compensation based on firm, group and individual performance
- Incentive compensation related to origination of new client sales
- Top rated wellness program
- Flexible working environment including remote and hybrid options
What’s in it for you:
- Working with an industry leader: Be part of a high-growth firm that is passionate for what’s next.
- An awesome culture: Thirty-one fundamental behaviors guide our culture every day ensuring we always deliver an exceptional team-member and client experience. We call it the Aprio Way. This shared mindset creates lasting relationships between team members and with clients.
- A great team: Work with a high-energy, passionate, caring and ambitious team of professionals in a collaborative culture.
- Entrepreneurship: Have the freedom to innovate and bring your ideas to help us grow to become the CPA firm of choice nationally.
- Growth opportunities: Grow professionally in an environment that fosters continuous learning and advancement.
- Competitive compensation: You will be rewarded with competitive compensation, industry-leading benefits and a flexible work environment to enjoy work/life balance.
EQUAL OPPORTUNITY EMPLOYER
Aprio is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race; color; religion; national origin; sex; pregnancy; sexual orientation; gender identity and/or expression; age; disability; genetic information, citizenship status; military service obligations or any other category protected by applicable federal, state, or local law.
Aprio, LLP and Aprio Advisory Group, LLC, operate in an alternative business structure, with Aprio Advisory Group, LLC providing non-attest tax and consulting services, and Aprio, LLP providing CPA firm services.
Skills
- API
- Automation
- AWS
- Azure
- CI/CD
- Cissp
- Cloud
- Cloud Native
- Cloud Security
- Cmmc
- Cybersecurity
- DevOps
- DevSecOps
- DLP
- DNS
- Entra ID
- Fedramp
- FinOps
- Firewall
- GCP
- IAM
- Infrastructure as Code
- KQL
- Kubernetes
- Microsoft Defender
- Microsoft Purview
- Microsoft Sentinel
- Network Security
- Networking
- Nist
- Observability
- PowerShell
- Pre-sales
- Python
- Secrets Management
- Serverless
- SIEM
- Threat Hunting
- Threat Modeling
- Vulnerability Management
- XDR
- Zero Trust
As published by lever · 16 questions · 1 written answer
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL
Short answers (5)
- Legal First & Last Name
- Preferred First & Last Name optional
- If yes, please type their name below optional
- What is the compensation you expect?
- What date are you available to begin work? optional
Pick from a list (10)
- Do you live in the United States?
- Are you eligible to work legally in the United States?
- Will you at any time require any form of work authorization, visa, or other immigration sponsorship?
- What is your preferred working arrangement? (Select all that apply) optional
- Have you ever been employed with our organization?
- Do you currently work for a member firm of the Aprio Firm Alliance or PS+?
- Do you know anyone who has been or is still employed by our organization? optional
- Colorado Job Application Fairness Act: You may redact information identifying your age, date of birth, and/or dates of attendance or graduation from an educational institution from any uploaded materials. optional
- MARYLAND APPLICANTS ONLY: Under Maryland law, an employer may not require or demand, as a condition of employment, prospective employment, or continued employment, that an individual submit to or take, a lie detector or similar test. An employer who violates this law is guilty of misdemeanor and subject to a fine not exceeding $100. optional
- MASSACHUSETTS APPLICANTS ONLY: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. optional
Written answers (1)
- Please provide your full address including city and state: