Cloud architect

We are seeking a highly experienced Cloud Infrastructure Architect at Capgemini to design and deliver secure, resilient hybrid on‐premises and cloud infrastructure for Australian defence and defence‐industry organisations. The architect will operate in highly regulated environments, supporting programs governed by the Defence Industry Security Program (DISP), Protective Security Policy Framework (PSPF), and Information Security Manual (ISM), and contributing to systems that require formal Authority to Operate (ATO).

• Architect and lead large‐scale migrations from on‐premises infrastructure to Azure.
• Design and implement Azure‐native solutions that meet performance, scalability, and security requirements.
• Develop cloud adoption frameworks, landing zones, and governance models.
• Conduct infrastructure assessments and create detailed migration roadmaps.
• Collaborate with engineering, DevOps, security, and application teams to ensure seamless integration.
• Define and enforce cloud architecture standards, patterns, and best practices.
• Provide technical leadership, mentoring, and guidance to cloud engineering teams.
• Engage with stakeholders to align cloud strategies with business objectives.

• Security clearance: NV1 Clearance.
• 8+ years of experience in cloud architecture and enterprise IT.
• Proven track record in leading complex cloud migration and transformation projects.
• Strong communication, stakeholder engagement, and documentation skills.
• Experience working in Agile and DevOps environments.
• Proficiency with Microsoft Azure (IaaS, PaaS, SaaS), Azure Well‐Architected Framework, Azure Landing Zones & Cloud Adoption Framework.
• Experience with Azure Migrate, Azure Site Recovery, Azure Resource Mover and legacy system modernisation (rehost, replatform, refactor).
• Hands‐on expertise in Infrastructure as Code (ARM templates, Bicep, Terraform, Ansible).
• Strong scripting skills (PowerShell, Bash, Python) and Azure Automation, Logic Apps, Azure Functions.
• DevOps & CI/CD experience (Azure DevOps, GitHub Actions, Jenkins, Docker, Kubernetes, AKS).
• Networking and connectivity knowledge (VNETs, NSGs, Load Balancers, VPN Gateway, ExpressRoute, Private Link, DNS, Azure Firewall, Application Gateway, Traffic Manager).
• Security & identity knowledge (Azure AD, RBAC, Managed Identities, Key Vault, Defender for Cloud, Sentinel, Zero Trust architecture, Azure Policy, Blueprints).
• Monitoring and optimisation expertise (Azure Monitor, Log Analytics, Application Insights, cost management, performance tuning).
• Enterprise‐scale architecture design, cloud governance, tagging strategies, and risk assessment & mitigation.
• Microsoft Certified: Azure Solutions Architect Expert preferred.