Senior Cloud Architect, RAAS | Automation Services

Work with a Top 20 CPA and advisory firm that Accounts for Anything.  Aprio has 40 U.S. office locations, as well as international office locations and more than 3,200 team members that speak 60+ languages across the globe.  By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio.

Job Sumamry

Aprio is seeking a Senior Cloud Architect to join its Risk Advisory & Assurance | Automation Services practice and help organizations design, modernize, and protect cloud environments while navigating complex cybersecurity, regulatory, and operational requirements. In this role, you will lead cloud architecture engagements from discovery through delivery, translating business, security, and compliance requirements into resilient, scalable, and supportable solutions across Microsoft Azure, AWS, and Google Cloud. You will serve as the senior technical authority for clients navigating cloud adoption, modernization, Zero Trust, governance, and regulated-environment initiatives while helping delivery teams apply repeatable architecture and engineering practices.

This position supports U.S. government and defense-related clients; certain engagements require personnel who are eligible to obtain a U.S. security clearance or who meet client-defined access requirements for controlled environment

What You'll Gain / Impact:

• Opportunity to serve as the senior technical authority on high-complexity cloud transformation and cybersecurity engagements.
• Exposure to a broad range of client environments, including U.S. government, defense, and regulated industries.
• Ability to shape cloud strategy, architecture standards, and security practices that drive lasting organizational change.
• Hands-on experience architecting multi-cloud solutions across Azure, AWS, and Google Cloud in real-world, high-stakes environments.
• Platform to lead, mentor, and develop architects and engineers within a growing, purpose-driven consulting practice.

Key Responsibilities:

• Lead client engagements from discovery through delivery, serving as the senior technical consultant and architecture authority.
• Facilitate executive briefings, workshops, and architecture sessions that translate business objectives, risk tolerance, and compliance obligations into actionable cloud strategies.
• Develop current-state and target-state architectures covering applications, infrastructure, identity, networking, security, data protection, observability, resilience, and operations.
• Design secure landing zones and cloud foundations using governance guardrails, account/subscription structures, policy enforcement, centralized logging, network segmentation, and identity-first access controls.
• Architect hybrid and multi-cloud solutions across Microsoft Azure, AWS, and/or Google Cloud, selecting services and patterns appropriate to client requirements and risk.
• Embed cybersecurity into architecture decisions using Zero Trust, least privilege, privileged access management, threat modeling, secure configuration, vulnerability management, encryption, and secrets management.
• Align solutions to compliance frameworks including CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and other client-specific regulatory or contractual requirements.
• Design for regulated workloads including controlled data boundaries, audit evidence, logging, data residency, secure administration, and separation of duties.
• Provide architecture oversight during implementation, reviewing detailed designs, infrastructure-as-code, configurations, security controls, and technical deliverables for quality and conformance.
• Partner with cybersecurity, compliance, engineering, and operations teams to resolve design tradeoffs and ensure solutions are operable, measurable, and audit-ready.
• Evaluate and rationalize cloud services balancing security, compliance, performance, availability, cost, supportability, and time to value.
• Develop roadmaps and migration strategies for application modernization, data migration, identity transformation, and cloud security uplift.
• Create client-ready architecture artifacts including diagrams, decision records, control mappings, implementation plans, risk registers, and executive recommendations.
• Lead, mentor, and develop a team of architects and engineers while contributing to technical reviews, estimation, solution quality, and continuous improvement.
• Support pre-sales and solution development by shaping scopes, assumptions, level-of-effort estimates, and technical approaches for complex opportunities.

Candidate Qualifications:

• Bachelor's degree in computer science, engineering, cybersecurity, information systems, or a related field, or equivalent practical experience.
• 10+ years of progressive technology experience in architecture, engineering, cybersecurity, cloud transformation, or related consulting responsibilities.
• 7+ years of client-facing consulting or architecture experience leading complex technical discussions and delivering tailored solutions for mid-market or enterprise organizations.
• 5+ years of hands-on cloud architecture experience designing and implementing production solutions in Azure, AWS, and/or Google Cloud.
• Demonstrated cybersecurity and compliance experience integrating technical controls and regulatory requirements into cloud architectures and implementation roadmaps.
• Strong architecture communication skills with the ability to explain risks, tradeoffs, and recommendations to executives, security leaders, auditors, engineers, and business stakeholders.
• Working knowledge of architecture and security methods such as well-architected frameworks, threat modeling, shared responsibility, Zero Trust, defense-in-depth, and secure-by-design principles.
• Ability to lead through ambiguity, manage competing requirements, drive decisions, and maintain delivery momentum across multiple stakeholder groups.
• Experience producing high-quality technical documentation including reference architectures, diagrams, standards, decision records, and implementation guidance.

Technical Depth:

Deep expertise in at least three of the following areas, with working knowledge of the others:

• Cloud architecture: Azure, AWS, and/or Google Cloud; landing zones; hybrid connectivity; resiliency; disaster recovery; and cloud operating models.
• Identity and access: Entra ID and cloud-native IAM; federation; Conditional Access; privileged access; just-in-time administration; workload identities; and secrets management.
• Cloud security operations: Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud, and/or comparable AWS or Google Cloud security services; SIEM/SOAR; detection engineering; and threat hunting.
• Data protection: encryption, key management, data classification, DLP, Microsoft Purview or comparable services, retention, and secure data lifecycle controls.
• Network security: segmentation, private connectivity, firewalls, secure remote administration, egress control, DNS security, web application protection, and Zero Trust network access.
• DevSecOps and automation: infrastructure-as-code, policy-as-code, CI/CD security, configuration management, PowerShell, Python, KQL, APIs, and automated compliance validation.
• Governance and compliance: cloud control frameworks, continuous monitoring, evidence generation, risk management, policy development, and remediation planning.

Certifications:

At least one of the following active certifications is required or must be obtained within 90 days of hire:

• Cybersecurity and architecture: CISSP, CCSP, or SABSA certification.
• Microsoft: AZ-305, AZ-500, or SC-100.
• AWS: AWS Certified Solutions Architect – Professional or AWS Certified Security – Specialty.
• Google Cloud: Professional Cloud Architect or Professional Cloud Security Engineer.

Additional cloud, security, networking, DevOps, or compliance certifications are preferred. Active certifications are required for consideration.

Preferred Experience:

• Architecture for U.S. Government or defense-related environments including Azure Government, Microsoft 365 GCC High, AWS GovCloud (US), or comparable regulated cloud platforms.
• Implementing or assessing controls for CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, DoD impact levels, or similar frameworks.
• Application and platform modernization including containers, Kubernetes, serverless architectures, APIs, data platforms, and cloud-native integration patterns.
• Cloud financial governance including cost allocation, optimization, forecasting, and architecture decisions informed by FinOps practices.
• Technical leadership in consulting delivery including mentoring, quality assurance, reusable intellectual property, and support for proposals or statements of work.