Enterprise Architect

App modernization combined with cloud migration 

KEY RESPONSIBILITIES

•    Drive end-to-end GCP target infrastructure design for multi-cloud migrations — hybrid networking, IAM, storage, and security perimeters.

•    Own GCP security architecture (GKE, IAM, VPC Service Controls, Security Command Center) and lead hands-on vulnerability remediation.

•    Set enterprise blueprints and governance using TOGAF principles; chair ADR boards and run DAR trade-off evaluations vs. AWS/Azure.

•    Map legacy AWS/Azure architectures and re-platform them onto scalable, fault-tolerant GCP topologies.

•    Architect ultra-low-latency, high-concurrency transactional platforms with sub-second, edge-to-cloud performance.

•    Design zero-downtime cutovers — shadow traffic, dual-write sync, automated rollback — and touchless GitOps deployments (ADO + ArgoCD).

•    Architect resilient microservices/microfrontends with sidecar patterns (Istio) and BFF-driven Web (React.js) and Mobile (Kotlin) platforms.

•    Lead Kafka/Redis/Valkey streaming & caching architecture and full-stack data observability via Datadog.

•    Embed AI coding assistants (Cursor, Copilot) into the SDLC and present architecture decisions to C-level stakeholders. 

TARGET TECHNOLOGY STACK 

·       Cloud, Security & Infra  : GCP (primary), AWS & Azure (sources), Security Command Center, IAM, KMS, VPC Service Controls, GKE, Istio, Terraform

·       Backend & Microservices :Java/J2EE, Spring Boot, Kotlin, Python, Microservices, REST APIs, Sidecar patterns

·       Web & Mobile :                 : React.js, Microfrontends, Mobile (Native/Hybrid), BFF patterns

·       Streaming & Caching:    : Apache Kafka, Redis, Valkey

·       Databases                           : GCP Cloud SQL, PostgreSQL, MongoDB, Azure Cosmos DB

·       DevOps & Observability : Azure DevOps, ArgoCD (GitOps), Touchless Deployments, Datadog, JProfiler

·       Governance & AI            : ADR Workshops, DAR Frameworks, EA Methodologies, AI Agents, Copilot/Cursor 

REQUIRED QUALIFICATIONS 

•    15+ years of progressive engineering leadership and enterprise architecture in complex, high-scale distributed environments.

•    Deep expertise in multi-cloud migration infrastructure setup and rapid troubleshooting of IAM/network/performance issues during cutovers.

•    Mastery of GCP security constructs (IAM, KMS, Cloud Armor, VPC Service Controls, Security Command Center) with hands-on remediation experience.

•    Proven ability to reverse-engineer legacy AWS/Azure architectures into high-availability GCP target designs.

•    Track record designing mission-critical, real-time, high-concurrency transactional or event-driven systems.

•    Proven zero-downtime cutover execution — canary testing, dual-write sync, touchless deployments, automated rollback.

•    Practical mastery of TOGAF / Domain-Driven Design for large-scale platform modernization (TOGAF certification a plus).

•    Demonstrated microservices, microfrontend, and sidecar pattern expertise.

•    Proven Web and Mobile architecture experience, including Kotlin exposure and mobile security.

•    Extensive Kafka streaming and Redis/Valkey caching architecture experience.

•    Hands-on data observability (data quality, schema drift, lineage) alongside APM tools like Datadog.

•    Proven leadership of ADR boards and structured DAR evaluations against AWS/Azure.

•    Direct GCP/multi-cloud migration leadership with zero data loss; GCP Professional Cloud Architect or Security Engineer certification highly desirable.

•    Hands-on code-level credibility in Java, Spring Boot, React.js, Python, Kotlin, and polyglot databases.