Enterprise Architect – Application Modernization & Cloud Migration

App modernization combined with cloud migration

KEY RESPONSIBILITIES

• Drive end-to-end GCP target infrastructure design for multi-cloud migrations — hybrid networking, IAM, storage, and security perimeters.

• Own GCP security architecture (GKE, IAM, VPC Service Controls, Security Command Center) and lead hands-on vulnerability remediation.

• Set enterprise blueprints and governance using TOGAF principles; chair ADR boards and run DAR trade-off evaluations vs. AWS/Azure.

• Map legacy AWS/Azure architectures and re-platform them onto scalable, fault-tolerant GCP topologies.

• Architect ultra-low-latency, high-concurrency transactional platforms with sub-second, edge-to-cloud performance.

• Design zero-downtime cutovers — shadow traffic, dual-write sync, automated rollback — and touchless GitOps deployments (ADO + ArgoCD).

• Architect resilient microservices/microfrontends with sidecar patterns (Istio) and BFF-driven Web (React.js) and Mobile (Kotlin) platforms.

• Lead Kafka/Redis/Valkey streaming & caching architecture and full-stack data observability via Datadog.

• Embed AI coding assistants (Cursor, Copilot) into the SDLC and present architecture decisions to C-level stakeholders.

TARGET TECHNOLOGY STACK

·       Cloud, Security & Infra  : GCP (primary), AWS & Azure (sources), Security Command Center, IAM, KMS, VPC Service Controls, GKE, Istio, Terraform

·       Backend & Microservices : Java/J2EE, Spring Boot, Kotlin, Python, Microservices, REST APIs, Sidecar patterns

·       Web & Mobile :                 : React.js, Microfrontends, Mobile (Native/Hybrid), BFF patterns

·       Streaming & Caching:     : Apache Kafka, Redis, Valkey

·       Databases                           : GCP Cloud SQL, PostgreSQL, MongoDB, Azure Cosmos DB

·       DevOps & Observability : Azure DevOps, ArgoCD (GitOps), Touchless Deployments, Datadog, JProfiler

·       Governance & AI            : ADR Workshops, DAR Frameworks, EA Methodologies, AI Agents, Copilot/Cursor

REQUIRED QUALIFICATIONS

• 15+ years of progressive engineering leadership and enterprise architecture in complex, high-scale distributed environments.

• Deep expertise in multi-cloud migration infrastructure setup and rapid troubleshooting of IAM/network/performance issues during cutovers.

• Mastery of GCP security constructs (IAM, KMS, Cloud Armor, VPC Service Controls, Security Command Center) with hands-on remediation experience.

• Proven ability to reverse-engineer legacy AWS/Azure architectures into high-availability GCP target designs.

• Track record designing mission-critical, real-time, high-concurrency transactional or event-driven systems.

• Proven zero-downtime cutover execution — canary testing, dual-write sync, touchless deployments, automated rollback.

• Practical mastery of TOGAF / Domain-Driven Design for large-scale platform modernization (TOGAF certification a plus).

• Demonstrated microservices, microfrontend, and sidecar pattern expertise.

• Proven Web and Mobile architecture experience, including Kotlin exposure and mobile security.

• Extensive Kafka streaming and Redis/Valkey caching architecture experience.

• Hands-on data observability (data quality, schema drift, lineage) alongside APM tools like Datadog.

• Proven leadership of ADR boards and structured DAR evaluations against AWS/Azure.

• Direct GCP/multi-cloud migration leadership with zero data loss; GCP Professional Cloud Architect or Security Engineer certification highly desirable.

• Hands-on code-level credibility in Java, Spring Boot, React.js, Python, Kotlin, and polyglot databases.