Principal Cloud Platform Architect – Denver

About the role

Hitachi Vantara is seeking a Principal Cloud Platform Architect to lead the design, implementation, and governance of its multi‑cloud foundation across AWS and Google Cloud Platform. This hybrid role is based in Denver and supports the company’s global digital transformation by ensuring secure, scalable, and resilient cloud environments.

Key responsibilities

• Design and operate enterprise‑scale multi‑account environments on AWS and GCP, including organization structures, landing zones, and service control policies.
• Own identity and access management frameworks, covering federated identity, role‑based access control, and access governance.
• Define and enforce cloud networking architecture such as Transit Gateway, Shared VPCs, hybrid connectivity, segmentation, routing, and DNS.
• Establish cloud operating models, standards, guardrails, and governance processes aligned with business objectives.
• Collaborate with engineering teams to provide shared services that enable secure and efficient cloud usage at scale.

Required profile

• Expert‑level experience with AWS Organizations, Control Tower, Landing Zones, and Service Control Policies.
• Proven track record designing and managing cloud foundations supporting dozens to hundreds of accounts across multiple business units.
• Extensive experience in enterprise IAM, federated identity, RBAC, and cloud security architecture.
• Deep knowledge of cloud network design, including Transit Gateway, Shared VPC, hybrid connectivity, segmentation, routing, and DNS.
• Strong expertise in AWS security, governance, and identity services.
• Ability to work on‑site periodically and collaborate in a hybrid environment.

Required skills

• AWS
• Google Cloud Platform (GCP)
• AWS Organizations
• Control Tower
• Landing Zones
• Service Control Policies (SCPs)
• Identity and Access Management (IAM)
• Federated identity
• Role‑based access control (RBAC)
• Access governance
• Cloud security architecture
• Transit Gateway
• Shared VPC
• Hybrid connectivity
• Network segmentation
• Routing strategy
• DNS architecture
• Multi‑cloud networking