## About the Role

This position owns the planning, design, and delivery of the public cloud architecture across major providers such as Alibaba Cloud, Tencent Cloud, Huawei Cloud, and AWS. The focus is to create environments that are highly available, secure, scalable, and cost-efficient across compute, storage, network, database, and middleware layers.

The role also defines and implements cloud security and account governance controls, including network protection, data protection, identity management, vulnerability scanning, auditing, and compliance. It works closely with business stakeholders, development teams, and operations teams to turn requirements into practical architecture standards and implementation guidance.

In addition, the role leads FinOps, automation, and reliability efforts. This includes cost control, performance tuning, troubleshooting, incident response, monitoring, alerting, and disaster recovery readiness to keep the cloud environment stable around the clock.

## Key Responsibilities

– Lead public cloud architecture planning, design, and implementation across major cloud vendors, with deep expertise in at least one or two mainstream providers.
– Design cloud solutions that balance availability, security, scalability, and cost efficiency.
– Build and maintain cloud security controls for network security, data protection, authentication, vulnerability management, security auditing, and compliance.
– Drive the implementation of multi-account governance, including RBAC, role design, resource isolation, cross-account collaboration, and account lifecycle management.
– Own FinOps execution, including cloud cost control strategy, resource optimization, cost monitoring, analysis, and waste reduction.
– Optimize cloud performance, resolve incidents, and lead emergency response planning.
– Establish monitoring, alerting, and disaster recovery capabilities to support 24/7 stability.
– Promote cloud-native, IaC, and DevOps practices, using automation to improve deployment and operations efficiency.
– Provide architecture consulting and technical support to business teams.
– Produce architecture documentation, standards, and implementation guidance for development and operations teams.
– Track new cloud services and vendor product updates, and apply suitable solutions to existing architectures.

## Required Skills

– Bachelor’s degree or higher in a computer-related field.
– 5+ years of experience in public cloud architecture design, implementation, and operations.
– Strong hands-on expertise in at least one major public cloud provider: Alibaba Cloud, Tencent Cloud, Huawei Cloud, or AWS.
– Deep understanding of compute, storage, network, security, and database services, including best practices.
– Strong cloud security architecture experience, including network security, data security, identity authentication, and compliance management.
– Practical FinOps experience in cloud cost analysis, optimization, and control.
– Experience with multi-account planning, permission design, resource isolation, cross-account collaboration, and account governance.
– Familiarity with Kubernetes, Docker, Terraform, Ansible, and CI/CD pipelines.
– Strong architecture design, troubleshooting, and risk management skills.
– Ability to handle complex technical issues independently and create emergency plans.
– Working knowledge of Linux and at least one scripting language such as Shell, Python, or Go.
– Strong communication, documentation, and cross-functional collaboration skills.
– Team management experience.

## Preferred Skills

– Experience with hybrid cloud or multi-cloud architecture.
– Experience with large-scale public cloud clusters of 1,000+ instances, including design, operations, and cost optimization.
– Public cloud architecture experience in highly regulated sectors such as finance or government.
– Experience building, optimizing, or migrating cloud environments from scratch.

## Cloud Platforms & Technologies

### Cloud Providers
– Alibaba Cloud
– Tencent Cloud
– Huawei Cloud
– AWS

### Core Cloud Services
– Compute
– Storage
– Network
– Database
– Middleware

### Networking & Security
– VPC
– Security groups
– WAF
– ACL
– Vulnerability scanning
– Security auditing

### Identity & Access
– MFA
– SSO
– RBAC

### Data Protection
– Encryption
– Backup
– Data masking

### Containers & Kubernetes
– Kubernetes
– Docker

### Infrastructure as Code
– Terraform
– Ansible

### CI/CD
– CI/CD pipelines

### Monitoring & Operations
– Monitoring
– Alerting

### Operating Systems
– Linux

### Scripting Languages
– Shell
– Python
– Go

## FinOps Responsibilities

– Define and implement cloud cost control strategies.
– Optimize resource usage through autoscaling, pay-as-you-go, and reserved instances.
– Build mechanisms for cost monitoring, analysis, and ongoing optimization.
– Reduce cloud waste while maintaining the right balance between cost and performance.

## Why You Might Be Interested

This role combines cloud architecture, security, FinOps, account governance, automation, and reliability in one scope. It should appeal to professionals who want broad ownership and who are comfortable working across business, development, and operations teams. The position also offers exposure to multiple major cloud platforms and the opportunity to influence both technical standards and operational practices.